GCVE - cpe:2.3:a:gnutls:gnutls:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnutls:gnutls:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gnutls (`0cf74fe9-30d4-507e-8d48-53264240a0f4`)
Product	Gnutls (`73043556-94ea-57fa-8324-3c6e88c2d595`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/gnutls/gnutls`	purl2cpe	2026-06-01 10:13:24.656361
`pkg:gitlab/gnutls/gnutls`	purl2cpe	2026-06-01 10:13:24.656362

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-3836`	vulnerable	2026-06-08 05:13:56.162194	Details available MEDIUM (5.9) It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages. Published: 2019-04-01T14:16:51.000Z Updated: 2024-08-04T19:19:18.612Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3836 https://gitlab.com/gnutls/gnutls/issues/704 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/ https://security.gentoo.org/glsa/201904-14 https://security.netapp.com/advisory/ntap-20190502-0005/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3829`	vulnerable	2026-06-08 05:13:56.144014	Details available MEDIUM (5.3) A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected. Published: 2019-03-27T17:24:17.000Z Updated: 2024-08-04T19:19:18.605Z Open on db.gcve.eu Reference links https://www.gnutls.org/security-new.html#GNUTLS-SA-2019-03-27 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3829 https://gitlab.com/gnutls/gnutls/issues/694 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRSOL66LHP4SD3Y2ECJDOGT4K663ECDU/ https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7TJIBRJWGWSH6XIO2MXIQ3W6ES4R6I4/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7507`	vulnerable	2026-06-08 05:09:56.299574	Details available GnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a status response TLS extension with valid contents. This could lead to a crash of the GnuTLS server application. Published: 2017-06-16T19:00:00.000Z Updated: 2024-08-05T16:04:11.924Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/99102 https://access.redhat.com/errata/RHSA-2017:2292 https://www.gnutls.org/security.html#GNUTLS-SA-2017-4 http://www.debian.org/security/2017/dsa-3884	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0294`	vulnerable	2026-06-08 05:06:14.238724	Details available GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. Published: 2020-01-27T15:12:11.000Z Updated: 2024-08-06T04:03:10.950Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1196323 https://gitlab.com/gnutls/gnutls/commit/6e76e9b9fa845b76b0b9a45f05f4b54a052578ff http://www.debian.org/security/2015/dsa-3191	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.