It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html | Mailing List Third Party Advisory |
https://access.redhat.com/errata/RHSA-2019:3600 | |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836 | Issue Tracking Third Party Advisory |
https://gitlab.com/gnutls/gnutls/issues/704 | Exploit Issue Tracking Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/ | |
https://security.gentoo.org/glsa/201904-14 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20190502-0005/ | Third Party Advisory |
https://usn.ubuntu.com/3999-1/ |
Configurations
History
No history.
Information
Published : 2019-04-01 15:29
Updated : 2024-02-04 20:20
NVD link : CVE-2019-3836
Mitre link : CVE-2019-3836
CVE.ORG link : CVE-2019-3836
JSON object : View
Products Affected
gnu
- gnutls
fedoraproject
- fedora
opensuse
- leap