Debian/gnutls28: high 7.5
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
Action: Upgrade gnutls28 to 3.6.7-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.7-2 | - |
Fixed versions
| 3.6.7-2 |
Sources
- osv: DEBIAN-CVE-2019-3836#Debian:13/gnutls28
- https://security-tracker.debian.org/tracker/CVE-2019-3836
published · modified · JSON