CVE-2021-4209Medium· 6.5▾ SunlitA NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.7%
1.7% → 1.9%
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
gnutls < 3.7.3enterprise_linux = 8.0active_iq_unified_managersolidfire_&_hci_management_nodehci_bootstrap_osUpgrade past the affected range:
gnutls 3.7.3Connected by shared product, vendor, weakness, or advisory.
CVE-2020-24659High· 7.5An issue was discovered in GnuTLS before 3.6.15
CVE-2026-1584High· 7.5A flaw was found in gnutls
CVE-2024-28834Medium· 5.3A flaw was found in GnuTLS
CVE-2023-5981Medium· 5.9A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS#1 v1.5 padding.
CVE-2023-0361High· 7.4A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS
CVE-2022-2509High· 7.5A vulnerability found in gnutls