9.8
Critical
CVE-2021-20232 A flaw was found in gnutls
Description
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gnutls | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- www.gnutls.org www.gnutls.org
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2021-18bef34f05 lists.fedoraproject.org
- [spark-issues] 20210413 [jira] [Created] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- security.netapp.com security.netapp.com
- [spark-issues] 20210417 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210423 [jira] [Resolved] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210425 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210426 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210426 [jira] [Updated] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210429 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210430 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of gnutls
The 5 CVEs of gnutls →
CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
7.4
High
CVE-2021-4209
A NULL pointer dereference flaw was found in GnuTLS
Not rated
CVE-2022-2509
A vulnerability found in gnutls
7.5
High
CVE-2021-20231
A flaw was found in gnutls
Not rated