Unrated severityNVD Advisory· Published Mar 27, 2019· Updated Aug 4, 2024
CVE-2019-3829
CVE-2019-3829
Description
A vulnerability was found in gnutls versions from 3.5.8 before 3.6.7. A memory corruption (double free) vulnerability in the certificate verification API. Any client or server application that verifies X.509 certificates with GnuTLS 3.5.8 or later is affected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18- Range: >=3.5.8, <3.6.7
- osv-coords16 versionspkg:apk/chainguard/gnutlspkg:apk/chainguard/gnutls-c++pkg:apk/chainguard/gnutls-c%2B%2Bpkg:apk/chainguard/gnutls-devpkg:apk/chainguard/gnutls-docpkg:apk/chainguard/gnutls-utilspkg:apk/wolfi/gnutlspkg:apk/wolfi/gnutls-c++pkg:apk/wolfi/gnutls-c%2B%2Bpkg:apk/wolfi/gnutls-devpkg:apk/wolfi/gnutls-docpkg:apk/wolfi/gnutls-utilspkg:rpm/opensuse/gnutls&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/gnutls&distro=openSUSE%20Tumbleweedpkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015
< 0+ 15 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.6.7-lp150.9.1
- (no CPE)range: < 3.7.2-1.2
- (no CPE)range: < 3.6.7-6.8.1
- (no CPE)range: < 3.6.7-6.8.1
- Range: fixed in 3.6.7
Patches
Vulnerability mechanics
References
11- lists.opensuse.org/opensuse-security-announce/2019-05/msg00017.htmlmitrevendor-advisoryx_refsource_SUSE
- access.redhat.com/errata/RHSA-2019:3600mitrevendor-advisoryx_refsource_REDHAT
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/A3ETBUFBB4G7AITAOUYPGXVMBGVXKUAN/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7TJIBRJWGWSH6XIO2MXIQ3W6ES4R6I4/mitrevendor-advisoryx_refsource_FEDORA
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WRSOL66LHP4SD3Y2ECJDOGT4K663ECDU/mitrevendor-advisoryx_refsource_FEDORA
- security.gentoo.org/glsa/201904-14mitrevendor-advisoryx_refsource_GENTOO
- usn.ubuntu.com/3999-1/mitrevendor-advisoryx_refsource_UBUNTU
- bugzilla.redhat.com/show_bug.cgimitrex_refsource_CONFIRM
- gitlab.com/gnutls/gnutls/issues/694mitrex_refsource_CONFIRM
- security.netapp.com/advisory/ntap-20190619-0004/mitrex_refsource_CONFIRM
- www.gnutls.org/security-new.htmlmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.