Search for packages
| purl | pkg:deb/debian/gnutls28@3.6.7-4%2Bdeb10u8 |
| Next non-vulnerable version | 3.7.9-2+deb12u5 |
| Latest non-vulnerable version | 3.7.9-2+deb12u5 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3qcs-1fcj-m3fw
Aliases: CVE-2020-11501 GNUTLS-SA-2020-03-31 |
gnutls: DTLS client hello contains a random value of all zeroes |
Affected by 11 other vulnerabilities. |
|
VCID-6fzu-8998-abdk
Aliases: CVE-2020-13777 GNUTLS-SA-2020-06-03 |
An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information. |
Affected by 11 other vulnerabilities. |
|
VCID-86j1-j381-cucy
Aliases: CVE-2022-2509 GNUTLS-SA-2022-07-07 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 11 other vulnerabilities. |
|
VCID-92x9-x1ep-cqdn
Aliases: CVE-2024-28834 GNUTLS-SA-2023-12-04 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 0 other vulnerabilities. |
|
VCID-9pdw-udwq-6kbz
Aliases: CVE-2025-9820 GNUTLS-SA-2025-11-18 |
gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function |
Affected by 0 other vulnerabilities. |
|
VCID-a18u-4j99-nbf8
Aliases: CVE-2024-0553 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 8 other vulnerabilities. |
|
VCID-abn3-2b4q-z7ga
Aliases: CVE-2023-5981 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 8 other vulnerabilities. |
|
VCID-f5c7-jcd9-67hj
Aliases: CVE-2025-14831 GNUTLS-SA-2026-02-09-2 |
gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification |
Affected by 0 other vulnerabilities. |
|
VCID-gy9e-81rw-pug2
Aliases: CVE-2021-4209 |
GnuTLS: Null pointer dereference in MD_UPDATE |
Affected by 11 other vulnerabilities. |
|
VCID-jxjc-vjdc-1yfj
Aliases: CVE-2023-0361 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 11 other vulnerabilities. |
|
VCID-k5vv-ts4z-j7g5
Aliases: CVE-2021-20232 |
gnutls: Use after free in client_send_params in lib/ext/pre_shared_key.c |
Affected by 11 other vulnerabilities. |
|
VCID-pf5n-65mk-2ff3
Aliases: CVE-2025-32990 GNUTLS-SA-2025-07-08-3 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-qtsh-kn2d-h7cr
Aliases: CVE-2024-28835 GNUTLS-SA-2024-01-23 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 0 other vulnerabilities. |
|
VCID-sp9u-9wwg-b7e9
Aliases: CVE-2020-24659 GNUTLS-SA-2020-09-04 |
A flaw was found in GnuTLS, possibly allowing a Denial of Service condition. |
Affected by 11 other vulnerabilities. |
|
VCID-uc8j-r79v-n7ck
Aliases: CVE-2025-32988 GNUTLS-SA-2025-07-08-2 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-uws5-j79f-cbar
Aliases: CVE-2021-20231 GNUTLS-SA-2021-03-10 |
gnutls: Use after free in client key_share extension |
Affected by 11 other vulnerabilities. |
|
VCID-w7f6-5b6h-8kh4
Aliases: CVE-2024-0567 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to a denial of service. |
Affected by 8 other vulnerabilities. |
|
VCID-wqyp-93bk-vbh2
Aliases: CVE-2025-6395 GNUTLS-SA-2025-07-08-4 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution. |
Affected by 0 other vulnerabilities. |
|
VCID-x5jd-qddc-eudq
Aliases: CVE-2024-12243 GNUTLS-SA-2025-02-07 |
Multiple vulnerabilities have been discovered in GnuTLS, the worst of which could lead to arbitrary code execution. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-3qcs-1fcj-m3fw | gnutls: DTLS client hello contains a random value of all zeroes |
CVE-2020-11501
GNUTLS-SA-2020-03-31 |
| VCID-6fzu-8998-abdk | An information disclosure vulnerability in GnuTLS allow remote attackers to obtain sensitive information. |
CVE-2020-13777
GNUTLS-SA-2020-06-03 |
| VCID-a296-a2f2-kfba | Multiple vulnerabilities have been found in GnuTLS, the worst of which could result in a Denial of Service condition. |
CVE-2019-3829
|
| VCID-k31b-6m7s-pffq | A null pointer dereference in GnuTLS might allow attackers to cause a Denial of Service condition. |
CVE-2017-7507
|
| VCID-q3g5-4xaf-hudf | gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery |
CVE-2018-10846
|
| VCID-qp8x-339r-pbhe | gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification |
CVE-2018-16868
|
| VCID-r531-qbtt-akgf | Multiple vulnerabilities have been found in GnuTLS, the worst of which could result in a Denial of Service condition. |
CVE-2019-3836
|
| VCID-vz27-wyaf-tkcr | gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant |
CVE-2018-10845
|
| VCID-zjx8-ydmt-juf3 | gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls |
CVE-2018-10844
|