Known vulnerabilities in gnutls28 (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:gnutls28_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gnutls28 (Ubuntu package) gnutls28 (Ubuntu package) is affected by 27 known vulnerabilities: 3 high, 18 medium, 6 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128580 - Information Exposure Through Timing Discrepancy
CVE-2026-5419
CWE-208 Low
No
No
3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 6 more
#VU128579 - Improper Certificate Validation
CVE-2026-3832
CWE-295 Medium
No
No
3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 6 more
#VU128578 - Out-of-bounds write
CVE-2026-42015
CWE-787 Medium
No
No
3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 19 more
#VU128577 - Out-of-bounds read
CVE-2026-5260
CWE-125 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128576 - Use After Free
CVE-2026-42014
CWE-416 Medium
No
No
3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 19 more
#VU128575 - Improper Certificate Validation
CVE-2026-42013
CWE-295 Medium
No
No
3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 19 more
#VU128574 - Improper Certificate Validation
CVE-2026-42012
CWE-295 Medium
No
No
3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 16 more
#VU128573 - Improper Certificate Validation
CVE-2026-42011
CWE-295 Medium
No
No
3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 13 more
#VU128572 - Improper Certificate Validation
CVE-2026-3833
CWE-295 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128571 - Improper Authentication
CVE-2026-42010
CWE-287 High
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 19 more
#VU128570 - Heap-based Buffer Overflow
CVE-2026-33845
CWE-122 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB20260509148
SB2026052063
and 14 more
#VU128569 - Always-Incorrect Control Flow Implementation
CVE-2026-42009
CWE-670 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 22 more
#VU128568 - Heap-based Buffer Overflow
CVE-2026-33846
CWE-122 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.9-3ubuntu2.2, 3.8.12-2ubuntu1.1 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 19 more
#VU122491 - Resource exhaustion
CVE-2025-14831
CWE-400 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.8, 3.8.3-1.1ubuntu3.5, 3.8.9-3ubuntu2.1 10.02.2026 SB2026021004
SB2026021048
SB2026021061
and 20 more
#VU118650 - Stack-based buffer overflow
CVE-2025-9820
CWE-121 Low
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.8, 3.8.3-1.1ubuntu3.5, 3.8.9-3ubuntu2.1 20.11.2025 SB2025112055
SB2025112746
SB2025112747
and 18 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395
CWE-476 Medium
No
No
3.4.10-4ubuntu1.9+esm2, 3.5.18-1ubuntu1.6+esm2, 3.6.13-2ubuntu1.12+esm1, 3.7.3-4ubuntu1.7, 3.8.3-1.1ubuntu3.4, 3.8.9-2ubuntu3.1 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990
CWE-476 Low
No
No
3.4.10-4ubuntu1.9+esm2, 3.5.18-1ubuntu1.6+esm2, 3.6.13-2ubuntu1.12+esm1, 3.7.3-4ubuntu1.7, 3.8.3-1.1ubuntu3.4, 3.8.9-2ubuntu3.1 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989
CWE-122 High
No
No
3.7.3-4ubuntu1.7, 3.8.3-1.1ubuntu3.4, 3.8.9-2ubuntu3.1 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553
CWE-208 Medium
No
No
3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more


Showing elements 1 - 20 out of 27