WID-SEC-W-2022-0920

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

GnuTLS: Schwachstelle ermöglicht Denial of Service

view advisory published 2022-03-02

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in GnuTLS ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2021-4209USmedium6.5—
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw l…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan