CVE-2019-3829: fedoraproject fedora Use After Free
Vulnerability summary
CVE-2019-3829 is a high (CVSS 7.5) Use After Free vulnerability in fedoraproject fedora. EPSS estimates a 58.97% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 5 · Related 6Timeline
- 27-03-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.
CVSS metrics
8 scores · 7 sources · 2 versions- CVE.orgCNA5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LDiffers
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · WolfiEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · ChainguardEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
58.97%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 58.97% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (gnutls.org)
Maturity: unknown
Exploit Reference (gitlab.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-416Use After FreeThe product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.
- CWE-415Double FreeThe product calls free() twice on the same memory address.
Affected systems
Alpine1 product
- gnutls≥ 3.5.8, < 3.6.7-r0
Chainguard1 product
- gnutlsAll versions (No fix recorded)
Debian1 product
- gnutls28< 3.6.7-2
Fedoraproject1 product
- fedorana
Gnu1 product
- gnutls≥ 3.5.8, < 3.6.7
Gnutls1 product
- gnutlsfixed in 3.6.7 | affected from 3.5.8
Mageia1 product
- gnutls< 3.5.13-1.3.mga6
Ubuntu1 product
- gnutls28< 3.5.18-1ubuntu1.1
Wolfi1 product
- gnutlsAll versions (No fix recorded)
9 vendors · 9 products
References
21 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3829X Refsource CONFIRMREPORTIssue TrackingThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.htmlVendor AdvisoryX Refsource SUSEWEB
