https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 03:32:34 +0000 https://db.gcve.eu/vuln/cve-2020-24659 <p><strong>Affected:</strong> Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application&#39;s error handling path, where the gnutls_deinit function is called after detecting a handshake failure.</p> <p><strong>Affected:</strong> Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP</p> <p>An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application&#39;s error handling path, where the gnutls_deinit function is called after detecting a handshake failure.</p> https://db.gcve.eu/vuln/cve-2020-24659 https://db.gcve.eu/vuln/usn-4491-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: gnutls28</p> <p>It was discovered that GnuTLS incorrectly handled certain alerts when being used with TLS 1.3 servers. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: gnutls28</p> <p>It was discovered that GnuTLS incorrectly handled certain alerts when being used with TLS 1.3 servers. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code.</p> https://db.gcve.eu/vuln/usn-4491-1