Product by Debian
Gnutls28
21 known vulnerabilities in Gnutls28 (Debian), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33845 | Gnutls: gnutls: denial of service via dtls zero-length fragment | 9.1 | |
| Critical | CVE-2026-42010 | Gnutls: gnutls: authentication bypass via nul character in username | 9.8 | |
| High | CVE-2026-42009 | Gnutls: gnutls: denial of service via dtls packet reordering vulnerability | 7.5 | |
| High | CVE-2022-2509 | GnuTLS: Double Free | 7.5 | |
| High | CVE-2026-33846 | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | 7.5 | |
| Medium | CVE-2024-12243 | Gnutls: gnutls impacted by inefficient der decoding in libtasn1 leading to remote dos | 5.3 | |
| High | CVE-2025-32988 | Gnutls: vulnerability in gnutls othername san export | 6.5 | |
| High | CVE-2026-5260 | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | 8.2 | |
| High | CVE-2023-0361 | Gnutls: security vulnerability | 7.4 | |
| Medium | CVE-2025-32989 | Gnutls: vulnerability in gnutls sct extension parsing | 5.3 | |
| High | CVE-2026-3833 | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | 7.4 | |
| High | CVE-2025-32990 | Gnutls: vulnerability in gnutls certtool template parsing | 6.5 | |
| High | CVE-2026-42013 | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | 8.2 | |
| Medium | CVE-2026-42015 | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | 5.3 | |
| High | CVE-2026-42011 | Gnutls: gnutls: security bypass due to incorrect name constraint handling | 7.4 | |
| Medium | CVE-2025-6395 | Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite() | 6.5 | |
| Medium | CVE-2025-14831 | Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification | 5.3 | |
| High | CVE-2026-42012 | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | 7.1 | |
| Low | CVE-2026-5419 | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | 3.7 | |
| Medium | CVE-2026-42014 | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | 6.6 | |
| Medium | CVE-2025-9820 | Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function | 4.0 |