gnutls28 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the gnutls28 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L TEMP-0000000-1BAE4D	<3.4.14-1
L CVE-2026-95210	*
L CVE-2026-95209	*
L CVE-2026-95184	*
L CVE-2026-88648	*
L CVE-2026-88647	*
L CVE-2026-67693	*
M Off-by-one Error	<3.7.9-2+deb12u7
M Expired Pointer Dereference	<3.7.9-2+deb12u7
H Improper Validation of Specified Quantity in Input	<3.7.9-2+deb12u7
H Improper Certificate Validation	<3.7.9-2+deb12u7
H Improper Certificate Validation	<3.7.9-2+deb12u7
C Improper Null Termination	<3.7.9-2+deb12u7
H Undefined Behavior for Input to API	<3.7.9-2+deb12u7
H Improper Handling of Length Parameter Inconsistency	<3.7.9-2+deb12u7
C Integer Underflow	<3.7.9-2+deb12u7
H Heap-based Buffer Overflow	<3.7.9-2+deb12u5
M Improper Certificate Validation	<3.7.9-2+deb12u5
H Double Free	<3.7.9-2+deb12u5
M Algorithmic Complexity	<3.7.9-2+deb12u6
L Uncaught Exception	<3.7.9-2+deb12u3
L Use of a Broken or Risky Cryptographic Algorithm	<3.7.9-2+deb12u3
M Algorithmic Complexity	<3.7.9-2+deb12u4
C Use After Free	<3.7.1-1
C Use After Free	<3.7.1-1
H NULL Pointer Dereference	<3.6.15-1
H Use of a Broken or Risky Cryptographic Algorithm	<3.6.14-1
H Use of Insufficiently Random Values	<3.6.13-2
M Information Exposure	<3.6.5-2
M Covert Timing Channel	<3.5.19-1
M Covert Timing Channel	<3.5.19-1
M Covert Timing Channel	<3.5.19-1
L Information Exposure	<3.7.9-2+deb12u7
H Improper Validation of Specified Quantity in Input	<3.7.9-2+deb12u7
H Improper Handling of Case Sensitivity	<3.7.9-2+deb12u7
L Incorrect Behavior Order: Early Validation	<3.8.9-3+e8
M Stack-based Buffer Overflow	<3.7.9-2+deb12u6
M NULL Pointer Dereference	<3.7.9-2+deb12u5
H Improper Verification of Cryptographic Signature	<3.7.9-2+deb12u2
H Information Exposure	<3.7.9-2+deb12u2
M Information Exposure	<3.7.9-2+deb12u1
H Information Exposure	<3.7.8-5
H Double Free	<3.7.7-1
M NULL Pointer Dereference	<3.7.3-2
H Access of Uninitialized Pointer	<3.6.7-2
H Double Free	<3.6.7-2
H Out-of-bounds Write	<3.5.8-4
H NULL Pointer Dereference	<3.5.8-6
C Out-of-Bounds	<3.5.8-1
C Out-of-Bounds	<3.5.8-1
H Out-of-bounds Read	<3.5.8-1
C Double Free	<3.5.8-1
H Access Restriction Bypass	<3.5.3-4
H Improper Input Validation	<3.4.13-1
M Improper Data Handling	<3.3.15-1
M CVE-2015-6251	<3.3.17-1
H CVE-2015-3308	<3.3.8-7
H Improper Certificate Validation	<3.3.8-6
M Cryptographic Issues	<3.3.8-4
L Cryptographic Issues	<3.3.8-5
M Out-of-Bounds	<3.2.15-1
M CVE-2014-3465	<3.2.10-1
M Access Restriction Bypass	<3.2.11-1
M Cryptographic Issues	<3.2.11-2
M Cryptographic Issues	<3.0.22-3
L Cryptographic Issues	<3.0.22-3
H Resource Management Errors	<3.0.14-1
M Cryptographic Issues	<3.0.17-2
M Cryptographic Issues	<3.0.11-1
M Inadequate Encryption Strength	<3.8.9-3+e1

Vulnerability

Vulnerable Version

TEMP-0000000-1BAE4D

<3.4.14-1