CVE-2019-3836
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 3.4%
probabilidade de exploração
3.4%top 12% das CVEs
exploração observada
nãonenhuma fonte reporta
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
gnutls · gnutlsReferências
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.htmlhttps://access.redhat.com/errata/RHSA-2019:3600https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836https://gitlab.com/gnutls/gnutls/issues/704https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/https://security.gentoo.org/glsa/201904-14https://security.netapp.com/advisory/ntap-20190502-0005/https://usn.ubuntu.com/3999-1/