Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Micro 5.1 package gnutls, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVEs (9)
CVE-2024-0553 — CVSS 7.5 (high): A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response…
CVE-2022-2509 — CVSS 7.5 (high): A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures…
CVE-2023-0361 — CVSS 7.4 (high): A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to…
CVE-2025-6395 — CVSS 6.5 (medium): A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
CVE-2025-32990 — CVSS 6.5 (medium): A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When…
CVE-2021-4209 — CVSS 6.5 (medium): A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input…
CVE-2025-32988 — CVSS 6.5 (medium): A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject…
CVE-2023-5981 — CVSS 5.9 (medium): A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of…
CVE-2024-12243 — CVSS 5.3 (medium): A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding…