NULL pointer dereference in GnuTLS - CVE-2021-4209

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU66124

NULL pointer dereference in GnuTLS - CVE-2021-4209

Published: August 5, 2022


Vulnerability identifier: #VU66124
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-4209
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in MD_UPDATE. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.


Affected software

GnuTLS
Oracle Solaris
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
Ubuntu
openEuler
cflinuxfs3
PowerStore T
IBM Cloud Object Storage Systems
libgnutls30 (Ubuntu package)
libgnutls-openssl27-debuginfo
libgnutls-devel
gnutls-debugsource
gnutls-debuginfo
libgnutls-openssl-devel
libgnutlsxx-devel
libgnutlsxx28
libgnutlsxx28-debuginfo
gnutls
libgnutls-openssl27
libgnutls28
libgnutls28-debuginfo
libgnutls28-32bit
libgnutls28-debuginfo-32bit
libgnutls30
libgnutls30-debuginfo
libgnutls30-32bit
libgnutls30-debuginfo-32bit
libgnutls30-hmac-32bit
libgnutls30-hmac
libgnutls30-32bit-debuginfo
gnutls-devel
gnutls-help
HPE Moonshot 1500 Chassis Manager

How to mitigate CVE-2021-4209

Install updates from vendor's website.

GnuTLS - update to 3.7.3
Oracle Solaris - update to 11.4 SRU 71
cflinuxfs3 - update to 0.313.0
IBM Cloud Object Storage Systems - update to 3.16.7.63
libgnutls30 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 3.5.18-1ubuntu1.6, 3.6.13-2ubuntu1.7, 3.7.3-4ubuntu1.1
libgnutls-openssl27-debuginfo - update to 3.3.27-3.6.1
libgnutls-devel - addressed in versions 3.3.27-3.6.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
gnutls-debugsource - addressed in versions 3.3.27-3.6.1, 3.4.17-8.11.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
gnutls-debuginfo - addressed in versions 3.3.27-3.6.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls-openssl-devel - update to 3.3.27-3.6.1
libgnutlsxx-devel - addressed in versions 3.3.27-3.6.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutlsxx28 - addressed in versions 3.3.27-3.6.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutlsxx28-debuginfo - addressed in versions 3.3.27-3.6.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
gnutls - addressed in versions 3.3.27-3.6.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls-openssl27 - update to 3.3.27-3.6.1
libgnutls28 - update to 3.3.27-3.6.1
libgnutls28-debuginfo - update to 3.3.27-3.6.1
libgnutls28-32bit - update to 3.3.27-3.6.1
libgnutls28-debuginfo-32bit - update to 3.3.27-3.6.1
libgnutls30 - addressed in versions 3.4.17-8.11.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls30-debuginfo - addressed in versions 3.4.17-8.11.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls30-32bit - addressed in versions 3.4.17-8.11.1, 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls30-debuginfo-32bit - update to 3.4.17-8.11.1
PowerStore T - update to 3.5.0.1-2083289
libgnutls30-hmac-32bit - addressed in versions 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls30-hmac - addressed in versions 3.6.7-14.16.1, 3.6.7-150000.6.45.2
libgnutls30-32bit-debuginfo - addressed in versions 3.6.7-14.16.1, 3.6.7-150000.6.45.2
gnutls - update to 3.6.14-9
gnutls-debuginfo - update to 3.6.14-9
gnutls-debugsource - update to 3.6.14-9
gnutls-devel - update to 3.6.14-9
gnutls-help - update to 3.6.14-9
HPE Moonshot 1500 Chassis Manager - update to 4.0-b43

External References

Related Security Bulletins