A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.
Se encontró un defecto en gnutls. Un uso de la memoria previamente liberada en el cliente que envía la extensión key_share puede conllevar a una corrupción de la memoria y otras consecuencias
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-416
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| gnu | gnutls | * | <built-in method update of dict object at 0x7fd36ad4f540> | Application |
| redhat | enterprise_linux | 8.0 | <built-in method update of dict object at 0x7fd36ad4c800> | Operating System |
| fedoraproject | fedora | 34 | <built-in method update of dict object at 0x7fd2a2df88c0> | Operating System |
| netapp | active_iq_unified_manager | - | <built-in method update of dict object at 0x7fd3844a2640> | Application |
| netapp | e-series_performance_analyzer | - | <built-in method update of dict object at 0x7fd36ad4db80> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
| Yes | cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:* |