Skip to content
COOEY

FAIL › dossier

gnutls

PRODUCT

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 4
DATEEVENTSEVSUMMARY
2026-05-07 CVE-2026-42010 high A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authe
2026-04-30 CVE-2026-33845 high A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of
2021-03-12 CVE-2021-20231 critical CVE-2021-20231: A flaw was found in gnutls. A use after free issue in client sending key_share e
2021-03-12 CVE-2021-20232 critical CVE-2021-20232: A flaw was found in gnutls. A use after free issue in client_send_params in lib/