VDB
BDU%3A2020-00252
BDU%3A2020-00252
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость криптографической библиотеки GnuTLS, связанная с доступом к неинициализированному указателю, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, Canonical Ltd., Red Hat Inc., Novell Inc., Free Software Foundation, Inc. | Fedora, Ubuntu, Red Hat Enterprise Linux, OpenSUSE Leap, GnuTLS |
Timeline
- Jan 27, 2020 CVE Published
- Apr 30, 2026 Distribution Patch
- Sep 23, 2026 Security Advisory
References
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.html url
- https://access.redhat.com/errata/RHSA-2019:3600 url
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836 url
- https://security.gentoo.org/glsa/201904-14 url
- https://security.netapp.com/advisory/ntap-20190502-0005/ url
- https://gitlab.com/gnutls/gnutls/issues/704 advisory
- https://access.redhat.com/security/cve/CVE-2019-3836?extIdCarryOver=true&sc_cid=701f2000001OH7JAAW advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/ advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2019-e8c1cf958f advisory
- https://usn.ubuntu.com/3999-1/ advisory