CVE Tracker

CVE-2021-20231 @ Saiph

Status
new
Priority
1.47
Match score
4.0
Risk
MemCorrupt Remote priv:user
CVSS
9.8 CRITICAL
Reason
cpe: gnutls; pkgs: gnutls-deb0-28, gnutls-openssl27; version: in-range: gnutls-openssl27-3.6.7-4+deb10u12; risk:memory_corruption
Created
2026-10-15T10:20:40Z
Updated
2026-10-20T10:18:49Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

PackageCommands
gnutls-openssl27-3.6.7-4+deb10u12
gnutls-deb0-28
gnutls
libcurl3-gnutls-7.64.0-4+deb10u9
libgnutls30-3.6.7-4+deb10u12
libgnutls-deb0-28-3.3.8-6+deb8u6
libgnutls-openssl27-3.6.7-4+deb10u12

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: gnutls-openssl27 · gnutls-deb0 · gnutls · gnutls-deb0-28

Same product CVEs in your queue

Other open tickets that look like the same product. Closed tickets are omitted unless they are already pegged to this CVE.

CVECVSSKEVSystemsStatus MatchedAlready related
CVE-2021-20232 9.8 Saiph new gnutls —
CVE-2024-0553 7.5 Library, Saiph, morris, mufasa new gnutls —
CVE-2020-24659 7.5 Library, Saiph, morris, mufasa new gnutls —
CVE-2022-2509 7.5 Library, Saiph, morris, mufasa new gnutls —
CVE-2020-13777 7.4 Saiph new gnutls —

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

OS
Debian GNU/Linux 10 (buster) (10) · debian
Arch
x86_64
kernel_release
uname -r → 4.19.0-27-amd64
kernel_version
uname -v → #1 SMP Debian 4.19.316-1 (2024-06-25)

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Description

A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.

Update status

Add note only

References

NVD: CVE-2021-20231