FAIL › dossier
gnutls
PRODUCTDossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 4
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2026-05-07 | CVE-2026-42010 | high | A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authe |
| 2026-04-30 | CVE-2026-33845 | high | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of |
| 2021-03-12 | CVE-2021-20231 | critical | CVE-2021-20231: A flaw was found in gnutls. A use after free issue in client sending key_share e |
| 2021-03-12 | CVE-2021-20232 | critical | CVE-2021-20232: A flaw was found in gnutls. A use after free issue in client_send_params in lib/ |