Known vulnerabilities in gnutls (Red Hat package)
Vendor:
Red Hat Inc.
Software:
gnutls (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:gnutls_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
39
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.8.10-8.el9_8
3.3.29-9.el7_9.2
3.7.6-21.el9_2.7
3.3.29-9.el7_9.1
3.6.14-10.el8_4.1
3.6.16-5.el8_6.5
3.8.9-9.el10_0.19
3.8.10-4.el9_8
3.8.10-3.el9
3.8.3-4.el9_4.5
3.7.6-21.el9_2.5
3.8.3-6.el9_6.3
3.8.9-9.el10_0.17
3.6.16-8.el8_10.5
3.8.3-10.el9_7
3.8.10-3.el10_1
3.8.3-9.el9
3.8.3-4.el9_4.4
3.6.16-8.el8_10.4
3.7.6-21.el9_2.4
3.8.3-6.el9_6.2
3.8.9-9.el10_0.14
3.8.3-6.el9
1.4.1-10.el5_9.2
2.8.5-10.el6_4.2
1.4.1-10.el5_9.1
2.8.5-10.el6_4.1
2.8.5-4.el6_2.2
1.4.1-7.el5_8.2
1.4.1-7.el5_8.1
1.0.20-4.el4_8.7
1.4.1-3.el5_4.8
1.0.20-4.el4_8.3
1.4.1-3.el5_3.5
1.4.1-3.el5_2.1
3.7.6-21.el9_2.3
3.8.3-4.el9_4
3.6.16-5.el8_6.4
3.6.16-7.el8_8.3
3.7.6-23.el9_3.4
3.6.16-8.el8_9.3
3.6.16-5.el8_6.3
3.7.6-21.el9_2.2
3.6.16-7.el8_8.2
3.6.16-8.el8_9.1
3.7.6-23.el9_3.3
3.6.16-7.el8_8.1
3.6.16-5.el8_6.2
3.6.16-8.el8_9
3.6.16-5.el8_6.1
3.6.16-6.el8_7
3.7.6-18.el9_0
3.7.6-18.el9_1
3.6.16-5.el8_6
3.7.6-12.el9_0
3.6.16-4.el8
3.6.8-12.el8_2
3.6.8-10.el8_1
3.6.14-8.el8_3
3.6.14-7.el8_3
3.6.8-11.el8_2
3.6.8-9.el8_1
3.6.5-3.el8_0
3.6.8-10.el8_2
3.6.8-8.el8
3.3.29-8.el7
3.3.26-9.el7
1.4.1-3.el5_1
1.0.20-4.el4_6
1.4.1-14.el5_10
1.0.20-5.el4
1.4.1-16.el5_10
3.1.18-9.el7_0
3.1.18-10.el7_0
2.12.23-22.el6
2.12.23-21.el6
2.8.5-19.el6_7
2.8.5-18.el6
2.8.5-14.el6_5
2.8.5-13.el6_5
2.8.5-10.el6_4
2.8.5-10.el6
2.8.5-4.el6_2
2.8.5-4.el6
Vulnerabilities (39)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU128580 - Information Exposure Through Timing Discrepancy CVE-2026-5419 |
CWE-208 | Low | 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 6 more |
||
| #VU128579 - Improper Certificate Validation CVE-2026-3832 |
CWE-295 | Medium | 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 6 more |
||
| #VU128578 - Out-of-bounds write CVE-2026-42015 |
CWE-787 | Medium | 3.3.29-9.el7_9.2, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 19 more |
||
| #VU128577 - Out-of-bounds read CVE-2026-5260 |
CWE-125 | Medium | 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU128576 - Use After Free CVE-2026-42014 |
CWE-416 | Medium | 3.3.29-9.el7_9.2, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 19 more |
||
| #VU128575 - Improper Certificate Validation CVE-2026-42013 |
CWE-295 | Medium | 3.3.29-9.el7_9.2, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 19 more |
||
| #VU128574 - Improper Certificate Validation CVE-2026-42012 |
CWE-295 | Medium | 3.3.29-9.el7_9.2, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 16 more |
||
| #VU128573 - Improper Certificate Validation CVE-2026-42011 |
CWE-295 | Medium | 3.3.29-9.el7_9.2, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026052063 SB2026052087 and 13 more |
||
| #VU128572 - Improper Certificate Validation CVE-2026-3833 |
CWE-295 | Medium | 3.3.29-9.el7_9.2, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 18 more |
||
| #VU128571 - Improper Authentication CVE-2026-42010 |
CWE-287 | High | 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 19 more |
||
| #VU128570 - Heap-based Buffer Overflow CVE-2026-33845 |
CWE-122 | Medium | 3.3.29-9.el7_9.1, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB20260509148 SB2026052063 and 14 more |
||
| #VU128569 - Always-Incorrect Control Flow Implementation CVE-2026-42009 |
CWE-670 | Medium | 3.3.29-9.el7_9.1, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 22 more |
||
| #VU128568 - Heap-based Buffer Overflow CVE-2026-33846 |
CWE-122 | Medium | 3.3.29-9.el7_9.1, 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.7.6-21.el9_2.7, 3.8.9-9.el10_0.19 | 30.04.2026 |
SB2026043071 SB2026051569 SB2026051570 and 19 more |
||
| #VU122491 - Resource exhaustion CVE-2025-14831 |
CWE-400 | Medium | 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5, 3.6.16-8.el8_10.5, 3.7.6-21.el9_2.5, 3.8.3-4.el9_4.5, 3.8.3-6.el9_6.3, 3.8.3-10.el9_7, 3.8.9-9.el10_0.17, 3.8.10-3.el10_1 | 10.02.2026 |
SB2026021004 SB2026021048 SB2026021061 and 20 more |
||
| #VU118650 - Stack-based buffer overflow CVE-2025-9820 |
CWE-121 | Low | 3.6.16-8.el8_10.5, 3.8.3-10.el9_7, 3.8.10-3.el10_1 | 20.11.2025 |
SB2025112055 SB2025112746 SB2025112747 and 18 more |
||
| #VU112995 - NULL Pointer Dereference CVE-2025-6395 |
CWE-476 | Medium | 3.6.16-8.el8_10.4, 3.7.6-21.el9_2.4, 3.8.3-4.el9_4.4, 3.8.3-6.el9_6.2, 3.8.9-9.el10_0.14 | 16.07.2025 |
SB20250716122 SB20250716124 SB20250716141 and 70 more |
||
| #VU112993 - Double Free CVE-2025-32988 |
CWE-415 | Medium | 3.6.16-8.el8_10.4, 3.7.6-21.el9_2.4, 3.8.3-4.el9_4.4, 3.8.3-6.el9_6.2, 3.8.9-9.el10_0.14 | 16.07.2025 |
SB20250716122 SB20250716124 SB20250716141 and 73 more |
||
| #VU112992 - Heap-based Buffer Overflow CVE-2025-32989 |
CWE-122 | High | 3.7.6-21.el9_2.4, 3.8.3-4.el9_4.4, 3.8.3-6.el9_6.2, 3.8.9-9.el10_0.14 | 16.07.2025 |
SB20250716122 SB20250716124 SB20250716141 and 46 more |
||
| #VU104044 - Resource exhaustion CVE-2024-12243 |
CWE-400 | Medium | 3.7.6-21.el9_2.4 | 18.02.2025 |
SB2025021831 SB2025021832 SB2025021835 and 65 more |
||
| #VU103980 - Resource exhaustion CVE-2024-12133 |
CWE-400 | Medium | 3.6.14-10.el8_4.1, 3.6.16-5.el8_6.5 | 14.02.2025 |
SB2025021428 SB2025021429 SB2025021430 and 78 more |
Showing elements 1 - 20 out of 39