gnutls | Snyk

Direct Vulnerabilities

Known vulnerabilities in the gnutls package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Improper Certificate Validation	*
M Off-by-one Error	*
M Improper Certificate Validation	*
M Expired Pointer Dereference	*
H Undefined Behavior for Input to API	*
M Improper Certificate Validation	*
H Improper Handling of Length Parameter Inconsistency	*
M Improper Handling of Case Sensitivity	*
H Integer Underflow	*
M Algorithmic Complexity	*
L Stack-based Buffer Overflow	*
M Heap-based Buffer Overflow	*
M Double Free	*
M NULL Pointer Dereference	*
M Improper Certificate Validation	*
M Algorithmic Complexity	*
M Use of a Broken or Risky Cryptographic Algorithm	*
M Uncaught Exception	*
M Information Exposure	*
M Improper Verification of Cryptographic Signature	*
M Information Exposure	*
M Covert Timing Channel	*
M Double Free	*
L NULL Pointer Dereference	*
M NULL Pointer Dereference	<0:3.3.26-9.el7
M Resource Exhaustion	<0:3.3.26-9.el7
M Heap-based Buffer Overflow	<0:3.3.26-9.el7
M Stack-based Buffer Overflow	<0:3.3.26-9.el7
M Use After Free	<0:3.3.26-9.el7
M Improper Certificate Validation	<0:3.3.26-9.el7
M Resource Exhaustion	*
M Improper Data Handling	<0:3.3.8-14.el7_2
M Use of a Broken or Risky Cryptographic Algorithm	*
H Information Exposure	*
M Integer Overflow or Wraparound	<0:3.1.18-10.el7_0
H Improper Handling of Length Parameter Inconsistency	<0:3.1.18-9.el7_0
H NULL Pointer Dereference	<0:3.1.18-9.el7_0
M Out-of-bounds Write	<0:3.3.26-9.el7
M Use After Free	*
M Use After Free	*
L Improper Certificate Validation	*
M Information Exposure	*
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.3.29-8.el7
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.3.29-8.el7
M Use of a Broken or Risky Cryptographic Algorithm	<0:3.3.29-8.el7

Vulnerability

Vulnerable Version

Improper Certificate Validation