CVE-2021-20231
קריטית 9.8
תיאור (מקור, אנגלית)
A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 4% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-416
מוצרים מושפעים
gnu: gnutls; redhat: enterprise linux; fedoraproject: fedora; netapp: active iq unified manager; netapp: e-series performance analyzer
קישורים
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10 ExploitVendor Advisory
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10 ExploitVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1922276 Issue TrackingPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1922276 Issue TrackingPatchThird Party Advisory
- https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b…
- https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782d…
- https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef45013191…
- https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459…
- https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d…
- https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c7133…