gnutls
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-42014 | | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-5419 | | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | LOW 3.7 | 0.5 % | ||
| CVE-2026-42015 | | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-42013 | | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH 8.2 | 0.4 % | ||
| CVE-2026-42012 | | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-5260 | | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH 8.2 | 0.8 % | ||
| CVE-2026-42009 | < 3.8.13 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2026-42011 | | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH 7.4 | 0.5 % | ||
| CVE-2026-42010 | 3.6.13 – < 3.8.13 | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-33845 | < 3.8.13 | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL 9.1 | 2.1 % | ||
| CVE-2026-3832 | < 3.8.13 | Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response | LOW 3.7 | 0.8 % | ||
| CVE-2026-3833 | < 3.8.13 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH 7.4 | 0.6 % | ||
| CVE-2026-1584 | | Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder | HIGH 7.5 | 1.3 % | ||
| CVE-2025-14831 | | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification | MEDIUM 5.3 | 0.7 % | ||
| CVE-2025-9820 | 3.8.1 ; 3.8.2 ; 3.8.3 ; … | Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function | MEDIUM 4.0 | 0.2 % | ||
| CVE-2024-12243 | ≤ 3.6.16 ; 3.7.0 – 3.7.11 ; 3.8.0 – < 3.8.8 | Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos | MEDIUM 5.3 | 1.3 % | ||
| CVE-2024-28834 | 3.7.6-23 | Gnutls: vulnerable to minerva side-channel information leak | MEDIUM 5.3 | 0.7 % | ||
| CVE-2024-28835 | 3.8.3 | Gnutls: potential crash during chain building/verification | MEDIUM 5.0 | 0.4 % | ||
| CVE-2024-0567 | 3.8.0 – < 3.8.3 | Gnutls: rejects certificate chain with distributed trust | HIGH 7.5 | 1.4 % | ||
| CVE-2024-0553 | 3.8.0 – < 3.8.3 | Gnutls: incomplete fix for cve-2023-5981 | HIGH 7.5 | 1.6 % | ||
| CVE-2023-0361 | gnutls-3.7.6 | A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to rec | HIGH 7.4 | 1.5 % | ||
| CVE-2021-4209 | Fixed in gnutls v3.7.3 | A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input m | MEDIUM 6.5 | 1.9 % | ||
| CVE-2022-2509 | gnutls 3.7.7(Fixed) | A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in | HIGH 7.5 | 2.3 % | ||
| CVE-2021-20232 | gnutls 3.7.1 | A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other | CRITICAL 9.8 | 3.3 % | ||
| CVE-2021-20231 | gnutls 3.7.1 | A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequence | CRITICAL 9.8 | 3.6 % |