9.8
Critique
CVE-2021-20232 A flaw was found in gnutls
Description
A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| gnutls | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Références
- www.gnutls.org www.gnutls.org
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2021-18bef34f05 lists.fedoraproject.org
- [spark-issues] 20210413 [jira] [Created] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- security.netapp.com security.netapp.com
- [spark-issues] 20210417 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210423 [jira] [Resolved] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210425 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210426 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210426 [jira] [Updated] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210429 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
- [spark-issues] 20210430 [jira] [Commented] (SPARK-35054) Getting Critical Vulnerability CVE-2021-20231 on spark 3.0.0 branch lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de gnutls
Les 5 CVE de gnutls →
CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
7.4
Élevée
CVE-2021-4209
A NULL pointer dereference flaw was found in GnuTLS
Non notée
CVE-2022-2509
A vulnerability found in gnutls
7.5
Élevée
CVE-2021-20231
A flaw was found in gnutls
Non notée