CVE-2021-20231 : faille critique gnu gnutls (CVSS 9.8)

A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

12 mars 2021

Dernière mise à jour

17 juin 2026

• gnu gnutls
• redhat enterprise linux
• fedoraproject fedora
• netapp active iq unified manager
• netapp e-series performance analyzer

• Fiche CVE-2021-20231 sur le NVD (NIST)
• bugzilla.redhat.com/show_bug.cgi
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.apache.org/thread…
• lists.fedoraproject.org/archives/list/package…
• security.netapp.com/advisory/ntap-20210416-0005/
• gnutls.org/security-new.html