Gnutls (Gnu) - vulnerabilities (CVEs)

74 CVEs, 0 in the last 30 days, 369 known versions, newest CVE from 2026-05-18. Vendor: Gnu.

CVEs of Gnutls

CVE-2026-42009 - CVSS 7.5 (high), 2026-05-18: A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator…
CVE-2026-42010 - CVSS 9.8 (critical), 2026-05-07: A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character…
CVE-2026-3833 - CVSS 7.4 (high), 2026-04-30: A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for…
CVE-2026-3832 - CVSS 3.7 (low), 2026-04-30: A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP)…
CVE-2026-33845 - CVSS 9.1 (critical), 2026-04-30: A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and…
CVE-2026-1584 - CVSS 7.5 (high), 2026-04-09: A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an…
CVE-2025-32990 - CVSS 8.2 (high), 2025-07-10: A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain…
CVE-2025-32988 - CVSS 8.2 (high), 2025-07-10: A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name…
CVE-2025-32989 - CVSS 5.3 (medium), 2025-07-10: A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension…
CVE-2024-0567 - CVSS 7.5 (high), 2024-01-16: A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating…
CVE-2024-0553 - CVSS 7.5 (high), 2024-01-16: A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts…
CVE-2023-5981 - CVSS 5.9 (medium), 2023-11-28: A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct…
CVE-2023-0361 - CVSS 7.4 (high), 2023-02-15: A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key…
CVE-2021-4209 - CVSS 6.5 (medium), 2022-08-24: A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined…
CVE-2022-2509 - CVSS 7.5 (high), 2022-08-01: A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in…
CVE-2021-20232 - CVSS 9.8 (critical), 2021-03-12: A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential…
CVE-2021-20231 - CVSS 9.8 (critical), 2021-03-12: A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
CVE-2020-24659 - CVSS 7.5 (high), 2020-09-04: An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with…
CVE-2020-13777 - CVSS 7.4 (high), 2020-06-04: GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in…
CVE-2020-11501 - CVSS 7.4 (high), 2020-04-03: GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS. The earliest affected version is 3.6.3 (2018-07-16) because of an error in a 2017-10-06…
CVE-2015-0294 - CVSS 7.5 (high), 2020-01-27: GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.
CVE-2015-8313 - CVSS 5.9 (medium), 2019-12-20: GnuTLS incorrectly validates the first byte of padding in CBC modes
CVE-2019-3836 - CVSS 7.5 (high), 2019-04-01: It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be…
CVE-2019-3829 - CVSS 7.5 (high), 2019-03-27: A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any…
CVE-2018-16868 - CVSS 5.6 (medium), 2018-12-03: A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker…
CVE-2018-10844 - CVSS 5.9 (medium), 2018-08-22: It was found that the GnuTLS implementation of HMAC-SHA-256 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct…
CVE-2018-10846 - CVSS 5.6 (medium), 2018-08-22: A cache-based side channel in GnuTLS implementation that leads to plain text recovery in cross-VM attack setting was found. An attacker could use a…
CVE-2018-10845 - CVSS 5.9 (medium), 2018-08-22: It was found that the GnuTLS implementation of HMAC-SHA-384 was vulnerable to a Lucky thirteen style attack. Remote attackers could use this flaw to conduct…
CVE-2016-4456 - CVSS 7.5 (high), 2017-08-08: The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem.
CVE-2017-7507 - CVSS 7.5 (high), 2017-06-16: GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could…
CVE-2017-7869 - CVSS 7.5 (high), 2017-04-14: GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in…
CVE-2017-5334 - CVSS 9.8 (critical), 2017-03-24: Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to have…
CVE-2017-5337 - CVSS 9.8 (critical), 2017-03-24: Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to have unspecified…
CVE-2017-5336 - CVSS 9.8 (critical), 2017-03-24: Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allows remote attackers to…
CVE-2017-5335 - CVSS 7.5 (high), 2017-03-24: The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote attackers to cause a denial of service…
CVE-2016-7444 - CVSS 7.5 (high), 2016-09-27: The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP…
CVE-2015-3308 - CVSS 7.5 (high), 2015-09-02: Double free vulnerability in lib/x509/x509_ext.c in GnuTLS before 3.3.14 allows remote attackers to cause a denial of service or possibly have unspecified…
CVE-2015-6251 - CVSS 5 (medium), 2015-08-24: Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long DistinguishedName…
CVE-2014-8155 - CVSS 4.3 (medium), 2015-08-14: GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spoof servers via a…
CVE-2015-0282 - CVSS 5 (medium), 2015-03-24: GnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the signature algorithm in the certificate, which allows remote attackers…
CVE-2014-8564 - CVSS 5 (medium), 2014-11-13: The _gnutls_ecc_ansi_x963_export function in gnutls_ecc.c in GnuTLS 3.x before 3.1.28, 3.2.x before 3.2.20, and 3.3.x before 3.3.10 allows remote attackers to…
CVE-2014-3465 - CVSS 5 (medium), 2014-06-10: The gnutls_x509_dn_oid_name function in lib/x509/common.c in GnuTLS 3.0 before 3.1.20 and 3.2.x before 3.2.10 allows remote attackers to cause a denial of…
CVE-2014-3468 - CVSS 7.5 (high), 2014-06-05: The asn1_get_bit_der function in GNU Libtasn1 before 3.6 does not properly report an error when a negative bit length is identified, which allows…
CVE-2014-3467 - CVSS 5 (medium), 2014-06-05: Multiple unspecified vulnerabilities in the DER decoder in GNU Libtasn1 before 3.6, as used in GnuTLS, allow remote attackers to cause a denial of service…
CVE-2014-3469 - CVSS 5 (medium), 2014-06-05: The (1) asn1_read_value_type and (2) asn1_read_value functions in GNU Libtasn1 before 3.6 allows context-dependent attackers to cause a denial of service…
CVE-2014-3466 - CVSS 6.8 (medium), 2014-06-03: Buffer overflow in the read_server_hello function in lib/gnutls_handshake.c in GnuTLS before 3.1.25, 3.2.x before 3.2.15, and 3.3.x before 3.3.4 allows remote…
CVE-2014-1959 - CVSS 5.8 (medium), 2014-03-07: lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to…
CVE-2014-0092 - CVSS 5.8 (medium), 2014-03-07: lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL…
CVE-2009-5138 - CVSS 5.8 (medium), 2014-03-07: GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows…
CVE-2013-4466 - CVSS 5 (medium), 2013-11-20: Buffer overflow in the dane_query_tlsa function in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.15 and 3.2.x before 3.2.5 allows remote servers to…
CVE-2013-4487 - CVSS 5 (medium), 2013-11-20: Off-by-one error in the dane_raw_tlsa in the DANE library (libdane) in GnuTLS 3.1.x before 3.1.16 and 3.2.x before 3.2.6 allows remote servers to cause a…
CVE-2013-2116 - CVSS 5 (medium), 2013-07-03: The _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in GnuTLS 2.12.23 allows remote attackers to cause a denial of service (buffer over-read and…
CVE-2013-1619 - CVSS 4 (medium), 2013-02-08: The TLS implementation in GnuTLS before 2.12.23, 3.0.x before 3.0.28, and 3.1.x before 3.1.7 does not properly consider timing side-channel attacks on a…
CVE-2012-1573 - CVSS 5 (medium), 2012-03-26: gnutls_cipher.c in libgnutls in GnuTLS before 2.12.17 and 3.x before 3.0.15 does not properly handle data encrypted with a block cipher, which allows remote…
CVE-2012-1569 - CVSS 5 (medium), 2012-03-26: The asn1_get_length_der function in decoding.c in GNU Libtasn1 before 2.12, as used in GnuTLS before 3.0.16 and other products, does not properly handle…
CVE-2012-1663 - CVSS 7.5 (high), 2012-03-13: Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have…
CVE-2012-0390 - CVSS 4.3 (medium), 2012-01-06: The DTLS implementation in GnuTLS 3.0.10 and earlier executes certain error-handling code only if there is a specific relationship between a padding length…
CVE-2011-4128 - CVSS 4.3 (medium), 2011-12-08: Buffer overflow in the gnutls_session_get_data function in lib/gnutls_session.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client…
CVE-2006-7239 - CVSS 5 (medium), 2010-05-24: The _gnutls_x509_oid2mac_algorithm function in lib/gnutls_algorithms.c in GnuTLS before 1.4.2 allows remote attackers to cause a denial of service (crash) via…
CVE-2010-0731 - CVSS 7.5 (high), 2010-03-26: The gnutls_x509_crt_get_serial function in the GnuTLS library before 1.2.1, when running on big-endian, 64-bit platforms, calls the asn1_read_value with a…
CVE-2009-3555 - CVSS 9.8 (critical), 2009-11-09: The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP…
CVE-2009-2730 - CVSS 7.5 (high), 2009-08-12: libgnutls in GnuTLS before 2.8.2 does not properly handle a '\0' character in a domain name in the subject's (1) Common Name (CN) or (2) Subject Alternative…
CVE-2009-2409 - CVSS 5.1 (medium), 2009-07-30: The Network Security Services (NSS) library before 3.12.3, as used in Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k; and other products…
CVE-2009-1417 - CVSS 5 (medium), 2009-04-30: gnutls-cli in GnuTLS before 2.6.6 does not verify the activation and expiration times of X.509 certificates, which allows remote attackers to successfully…
CVE-2009-1416 - CVSS 7.5 (high), 2009-04-30: lib/gnutls_pk.c in libgnutls in GnuTLS 2.5.0 through 2.6.5 generates RSA keys stored in DSA structures, instead of the intended DSA keys, which might allow…
CVE-2009-1415 - CVSS 4.3 (medium), 2009-04-30: lib/pk-libgcrypt.c in libgnutls in GnuTLS before 2.6.6 does not properly handle invalid DSA signatures, which allows remote attackers to cause a denial of…
CVE-2008-4989 - CVSS 5.9 (medium), 2008-11-13: The _gnutls_x509_verify_certificate function in lib/x509/verify.c in libgnutls in GnuTLS before 2.6.1 trusts certificate chains in which the last certificate…
CVE-2008-2377 - CVSS 7.6 (high), 2008-08-08: Use-after-free vulnerability in the _gnutls_handshake_hash_buffers_clear function in lib/gnutls_handshake.c in libgnutls in GnuTLS 2.3.5 through 2.4.0 allows…
CVE-2008-1949 - CVSS 9.3 (critical), 2008-05-21: The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages…
CVE-2008-1948 - CVSS 10 (critical), 2008-05-21: The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the…
CVE-2008-1950 - CVSS 5 (medium), 2008-05-21: Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to…
CVE-2006-4790 - CVSS 5 (medium), 2006-09-14: verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when…
CVE-2005-1431 - CVSS 5 (medium), 2005-05-03: The "record packet parsing" in GnuTLS 1.2 before 1.2.3 and 1.0 before 1.0.25 allows remote attackers to cause a denial of service, possibly related to padding…
CVE-2004-2531 - CVSS 7.8 (high), 2004-12-31: X.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16 allows remote attackers to cause a denial of service (CPU…