Aller au contenu
en Se connecter
Non notée

CVE-2021-4209 A NULL pointer dereference flaw was found in GnuTLS

Description

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

Produits et versions touchés

Produit Versions touchées Corrigé en
gnutls Versions non publiées
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.0 → < 3.1.5 3.1.5

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de gnutls

Les 5 CVE de gnutls →
CVE-2023-0361 A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS 7.4 Élevée CVE-2022-2509 A vulnerability found in gnutls 7.5 Élevée CVE-2021-20232 A flaw was found in gnutls 9.8 Critique CVE-2021-20231 A flaw was found in gnutls Non notée
Suivre cette CVE