CVE-2021-4209Medium· 6.5▾ SunlitA NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.7%
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
gnutls < 3.7.3enterprise_linux = 8.0active_iq_unified_managersolidfire_&_hci_management_nodehci_bootstrap_osUpgrade past the affected range:
gnutls 3.7.3Connected by shared product, vendor, weakness, or advisory.
CVE-2021-38604High· 7.5In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference
CVE-2020-24659High· 7.5An issue was discovered in GnuTLS before 3.6.15
CVE-2019-9923High· 7.5pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended headers.
CVE-2026-1584High· 7.5A flaw was found in gnutls
CVE-2022-2509High· 7.5A vulnerability found in gnutls
CVE-2021-20231Critical· 9.8A flaw was found in gnutls