CVE-2020-24659High· 7.5▾ TwilightAn issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happe…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
3.7%
An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application's error handling path, where the gnutls_deinit function is called after detecting a handshake failure.
gnutls < 3.6.15fedora = 32fedora = 33leap = 15.1leap = 15.2ubuntu_linux = 20.04Upgrade past the affected range:
gnutls 3.6.15Connected by shared product, vendor, weakness, or advisory.
CVE-2021-4209Medium· 6.5A NULL pointer dereference flaw was found in GnuTLS
CVE-2021-38604High· 7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference
CVE-2019-9923High· 7.5pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
CVE-2026-1584High· 7.5A flaw was found in gnutls
CVE-2022-3715High· 7.8A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform
CVE-2022-2509High· 7.5A vulnerability found in gnutls