CVE-2019-3836
- State
- Published
- Severity
- 5.9 Medium
- Published
- Apr 1, 2019
- Updated
- Aug 4, 2024
- Reserved
- Jan 3, 2019
Description
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.9 Medium | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
gnutlsgnutls |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836
- https://gitlab.com/gnutls/gnutls/issues/704
- FEDORA-2019-46df367eedvendor-advisory
- GLSA-201904-14vendor-advisory
- https://security.netapp.com/advisory/ntap-20190502-0005/
- openSUSE-SU-2019:1353vendor-advisory
- USN-3999-1vendor-advisory
- RHSA-2019:3600vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.