Gnutls vulnerabilities
5 vulnerabilities
Known vulnerabilities in Gnutls products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2CVE-2015-0294debiangnutls28+9
EPSS score1.59%
GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate.CVE-2025-13151alpinelibtasn1+25EPSS score1.18%
Stack-based buffer overflow in libtasn1 version: v4.20.0. The function fails to validate the size of input data resulting in a buffer overflow in asn1_expend_octet_string.CVE-2017-7507alpinegnutls+6EPSS score3.41%
GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application.CVE-2019-3836alpinegnutls+7EPSS score3.40%
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.CVE-2019-3829alpinegnutls+8EPSS score58.97%
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.