CVE-2021-4209
—CVSS 3.1
6.5 medium
EPSS
2%p76
Published
()
Modified
Description
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
In the news0 stories
No ingested article mentions this CVE yet.