Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-4209

Опубликовано: 24 авг. 2022
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*
Версия до 3.7.3 (исключая)
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:*
Конфигурация 4

Одновременно

cpe:2.3:a:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%
0.00148
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476
CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 3 года назад

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

CVSS3: 6.5
redhat
больше 3 лет назад

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

CVSS3: 6.5
msrc
почти 3 года назад

Описание отсутствует

CVSS3: 6.5
debian
почти 3 года назад

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash ...

suse-cvrf
больше 3 лет назад

Security update for gnutls

EPSS

Процентиль: 36%
0.00148
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-476
CWE-476