Open Source GnuTLS

Name: Open Source GnuTLS
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical11high4medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-13777US	high7.4OT high	22.3% (98th)	Exploit	3.6.14	2020-06-04	< 3.6.14
CVE-2019-3829US	high7.5	59.0% (99th)	—	3.6.7	2019-03-27	< 3.6.7
CVE-2015-6251US	medium5.0	19.0% (97th)	—	3.4.4	2015-08-24	2 versions
CVE-2021-20231US	critical9.8	3.65% (90th)	—	3.7.1	2021-03-12	< 3.7.1
CVE-2019-3836US	high7.5	3.40% (89th)	—	3.6.7	2019-04-01	< 3.6.7
CVE-2021-20232US	critical9.8	3.35% (89th)	—	3.7.1	2021-03-12	< 3.7.1
CVE-2014-8564US	medium5.0	3.28% (88th)	—	no fix	2014-11-13	3 versions
CVE-2015-7575US	medium5.9	2.90% (87th)	—	3.3.15	2016-01-09	< 3.3.15
CVE-2017-7869US	high7.5	2.84% (87th)	—	3.5.10	2017-04-14	< 3.5.10
CVE-2022-2509US	high7.5	2.25% (83rd)	—	3.7.7	2022-08-01	< 3.7.7
CVE-2026-33845US	critical9.1	2.07% (81st)	—	3.8.13	2026-04-30	< 3.8.13
CVE-2024-0553US	high7.5	1.61% (76th)	—	3.8.3	2024-01-16	< 3.8.3
CVE-2025-32988US	high8.2	1.47% (74th)	—	3.8.10	2025-07-10	< 3.8.10
CVE-2025-32989US	—	1.47% (74th)	—	3.8.10	2025-07-10	< 3.8.10
CVE-2023-0361US	high7.4	1.45% (73rd)	—	3.8.0	2023-02-15	< 3.8.0
CVE-2024-0567US	high7.5	1.39% (72nd)	—	3.8.3	2024-01-16	< 3.8.3
CVE-2026-42009US	—	1.33% (71st)	—	3.8.13	2026-05-18	< 3.8.13
CVE-2026-1584US	—	1.32% (71st)	—	3.8.12	2026-04-09	< 3.8.12
CVE-2023-5981US	medium5.9	1.27% (70th)	—	3.8.2	2023-11-28	< 3.8.2
CVE-2026-33846US	—	1.26% (70th)	—	3.8.13	2026-05-04	< 3.8.13
CVE-2026-42010US	critical9.8	1.05% (64th)	—	3.8.13	2026-05-07	< 3.8.13
CVE-2025-32990US	high8.2	0.90% (59th)	—	3.8.10	2025-07-10	< 3.8.10
CVE-2026-3832US	—	0.80% (56th)	—	3.8.13	2026-04-30	< 3.8.13
CVE-2025-6395US	—	0.77% (55th)	—	3.8.10	2025-07-10	< 3.8.10
CVE-2026-5260US	—	0.77% (55th)	—	3.8.13	2026-05-26	< 3.8.13
CVE-2026-42015US	—	0.73% (54th)	—	3.8.13	2026-05-26	< 3.8.13
CVE-2024-28834US	—OT elevated	0.72% (54th)	—	3.8.4	2024-03-21	< 3.8.4
CVE-2026-3833US	high7.4	0.56% (47th)	—	3.8.13	2026-04-30	< 3.8.13
CVE-2026-5419US	—	0.54% (45th)	—	3.8.13	2026-06-01	< 3.8.13
CVE-2026-42011US	—	0.47% (41st)	—	3.8.13	2026-05-07	< 3.8.13
CVE-2026-42013US	—	0.42% (36th)	—	3.8.13	2026-05-26	< 3.8.13
CVE-2024-28835US	—	0.39% (33rd)	—	3.8.4	2024-03-21	< 3.8.4
CVE-2026-42012US	—	0.35% (29th)	—	3.8.13	2026-05-26	< 3.8.13
CVE-2026-42014US	—	0.15% (4th)	—	3.8.13	2026-06-16	< 3.8.13

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation4 CVEs
CWE-415Double Free4 CVEs
CWE-203Observable Discrepancy3 CVEs
CWE-416Use After Free3 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs
CWE-208Observable Timing Discrepancy2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-476NULL Pointer Dereference2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan