Direct Vulnerabilities

Known vulnerabilities in the gnutls package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Off-by-one Error

<0:3.3.29-9.0.3.el7_9
  • M
Improper Certificate Validation

<0:3.3.29-9.0.3.el7_9
  • M
Improper Handling of Case Sensitivity

<0:3.3.29-9.0.3.el7_9
  • M
Expired Pointer Dereference

<0:3.3.29-9.0.3.el7_9
  • M
Improper Validation of Specified Quantity in Input

<0:3.3.29-9.0.3.el7_9
  • M
Improper Certificate Validation

<0:3.3.29-9.0.3.el7_9
  • H
Improper Handling of Length Parameter Inconsistency

<0:3.3.29-9.0.1.el7_9
  • H
Undefined Behavior for Input to API

<0:3.3.29-9.0.1.el7_9
  • H
Integer Underflow

<0:3.3.29-9.0.1.el7_9
  • M
Covert Timing Channel

<0:3.3.29-8.0.1.el7
  • M
Covert Timing Channel

<0:3.3.29-8.0.1.el7
  • M
Covert Timing Channel

<0:3.3.29-8.0.1.el7
  • M
Access Restriction Bypass

<0:3.3.26-9.el7
  • M
Out-of-bounds Write

<0:3.3.26-9.el7
  • M
Double Free

<0:3.3.26-9.el7
  • M
NULL Pointer Dereference

<0:3.3.26-9.el7
  • M
Out-of-Bounds

<0:3.3.26-9.el7
  • M
Out-of-bounds Read

<0:3.3.26-9.el7
  • M
Out-of-Bounds

<0:3.3.26-9.el7
  • M
Improper Data Handling

<0:3.3.8-14.el7_2
  • M
Cryptographic Issues

<0:3.1.18-10.el7_0
  • H
CVE-2014-3465

<0:3.1.18-9.el7_0
  • H
Out-of-Bounds

<0:3.1.18-9.el7_0