Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-prf7-7jvx-hxj5

Опубликовано: 10 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). When it reads certain settings from a template file, it can allow an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial of service (DoS) that could crash the system.

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). When it reads certain settings from a template file, it can allow an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial of service (DoS) that could crash the system.

EPSS

Процентиль: 24%
0.00078
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
4 месяца назад

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

CVSS3: 6.5
redhat
4 месяца назад

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

CVSS3: 6.5
nvd
4 месяца назад

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

CVSS3: 6.5
msrc
3 месяца назад

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

CVSS3: 6.5
debian
4 месяца назад

A NULL pointer dereference flaw was found in the GnuTLS software in _g ...

EPSS

Процентиль: 24%
0.00078
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476