CVE-2019-3836mediumCWE-456

CVE-2019-3836: medium-severity vulnerability in gnutls

Published · Updated

Follow this CVE+ Monitor gnutls+ Monitor gnutls28

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 3.4%
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
gnutls · gnutls
Related CVEs — gnutls

In the same product, most dangerous first.

CVE-2019-3829MEDIUMCVE-2019-3829EPSS 59.2%