CVE-2019-3829
Published: 27 March 2019
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.
Priority
CVSS 3 base score: 7.5
Status
Package | Release | Status |
---|---|---|
gnutls26 Launchpad, Ubuntu, Debian |
bionic |
Does not exist
|
cosmic |
Does not exist
|
|
disco |
Does not exist
|
|
precise |
Not vulnerable
(code not present)
|
|
trusty |
Not vulnerable
(code not present)
|
|
upstream |
Needs triage
|
|
xenial |
Does not exist
|
|
gnutls28 Launchpad, Ubuntu, Debian |
bionic |
Released
(3.5.18-1ubuntu1.1)
|
cosmic |
Released
(3.6.4-2ubuntu1.2)
|
|
disco |
Released
(3.6.5-2ubuntu1.1)
|
|
precise |
Does not exist
|
|
trusty |
Does not exist
(trusty was not-affected [code not present])
|
|
upstream |
Released
(3.6.7)
|
|
xenial |
Not vulnerable
(code not present)
|