Known vulnerabilities in gnutls28 (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:gnutls28_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 24
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting gnutls28 (Debian package) gnutls28 (Debian package) is affected by 24 known vulnerabilities: 3 high, 18 medium, 3 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128580 - Information Exposure Through Timing Discrepancy
CVE-2026-5419
CWE-208 Low
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 5 more
#VU128579 - Improper Certificate Validation
CVE-2026-3832
CWE-295 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 5 more
#VU128578 - Out-of-bounds write
CVE-2026-42015
CWE-787 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128577 - Out-of-bounds read
CVE-2026-5260
CWE-125 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 17 more
#VU128576 - Use After Free
CVE-2026-42014
CWE-416 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128575 - Improper Certificate Validation
CVE-2026-42013
CWE-295 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128574 - Improper Certificate Validation
CVE-2026-42012
CWE-295 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 15 more
#VU128573 - Improper Certificate Validation
CVE-2026-42011
CWE-295 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026052063
SB2026052087
and 12 more
#VU128572 - Improper Certificate Validation
CVE-2026-3833
CWE-295 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 17 more
#VU128571 - Improper Authentication
CVE-2026-42010
CWE-287 High
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU128570 - Heap-based Buffer Overflow
CVE-2026-33845
CWE-122 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB20260509148
SB2026052063
and 13 more
#VU128569 - Always-Incorrect Control Flow Implementation
CVE-2026-42009
CWE-670 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 21 more
#VU128568 - Heap-based Buffer Overflow
CVE-2026-33846
CWE-122 Medium
No
No
3.7.9-2+deb12u7, 3.8.9-3+deb13u4 30.04.2026 SB2026043071
SB2026051569
SB2026051570
and 18 more
#VU122491 - Resource exhaustion
CVE-2025-14831
CWE-400 Medium
No
No
3.7.9-2+deb12u6, 3.8.9-3+deb13u2 10.02.2026 SB2026021004
SB2026021048
SB2026021061
and 20 more
#VU118650 - Stack-based buffer overflow
CVE-2025-9820
CWE-121 Low
No
No
3.7.9-2+deb12u6, 3.8.9-3+deb13u2 20.11.2025 SB2025112055
SB2025112746
SB2025112747
and 18 more
#VU112995 - NULL Pointer Dereference
CVE-2025-6395
CWE-476 Medium
No
No
3.7.9-2+deb12u5 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 70 more
#VU112994 - NULL Pointer Dereference
CVE-2025-32990
CWE-476 Low
No
No
3.7.9-2+deb12u5 16.07.2025 SB20250716122
SB20250716123
SB20250716124
and 79 more
#VU112993 - Double Free
CVE-2025-32988
CWE-415 Medium
No
No
3.7.9-2+deb12u5 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 73 more
#VU112992 - Heap-based Buffer Overflow
CVE-2025-32989
CWE-122 High
No
No
3.7.9-2+deb12u5 16.07.2025 SB20250716122
SB20250716124
SB20250716141
and 46 more
#VU104044 - Resource exhaustion
CVE-2024-12243
CWE-400 Medium
No
No
3.7.9-2+deb12u4 18.02.2025 SB2025021831
SB2025021832
SB2025021835
and 65 more


Showing elements 1 - 20 out of 24