CVE-2019-3836

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-04-01 15:29

Updated : 2024-02-04 20:20


NVD link : CVE-2019-3836

Mitre link : CVE-2019-3836

CVE.ORG link : CVE-2019-3836


JSON object : View

Products Affected

gnu

  • gnutls

fedoraproject

  • fedora

opensuse

  • leap
CWE
CWE-824

Access of Uninitialized Pointer

CWE-456

Missing Initialization of a Variable