VULNERABILITY INTELLIGENCE

CVE-2021-20232

CVSS score9.8 CRITICAL
EPSS probability3.35%
CISA KEVNot currently listed
Published2021-03-12
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

Weakness classification

  • secalert@redhat.com: CWE-416

Primary references