gnutls (SUSE:Linux Enterprise Module for Basesystem 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Basesystem 15 SP4 package gnutls, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2022-2509 — CVSS 7.5 (high): A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures…
• CVE-2023-0361 — CVSS 7.4 (high): A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to…
• CVE-2023-5981 — CVSS 5.9 (medium): A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of…