NVD disclosure day

Published threat advisories for March 12, 2021

CVE-2021-20232

GnuTLS Use-After-Free Memory Corruption Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A use-after-free vulnerability in the GnuTLS library could lead to memory corruption and other consequences. This flaw may be reachable over the network without authentication, impacting systems that rely on secure network communications. Organizations should verify their use of GnuTLS and assess potential exposure.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2021-20231

GnuTLS Use-After-Free Memory Corruption Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A use-after-free flaw in GnuTLS, a security library, can lead to memory corruption if a client sends a specific key share extension. This could impact systems relying on GnuTLS for secure network communications.

NVD modified: NVD date unavailable