PT-2021-5771 · Gnutls+10 · Gnutls+10

Shashank Jain · Published 2021-01-22 · Updated 2025-12-03 · CVE-2021-20232

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GnuTLS (affected versions not specified)

Description A flaw was found in the client send params function of the lib/ext/pre shared key.c component, related to a use after free issue. This may lead to memory corruption and other potential consequences, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2021:4451

ALT-PU-2021-1535

ALT-PU-2021-1545

ALT-PU-2021-1785

ALT-PU-2022-2183

AZL-6447

BDU:2022-00220

CESA-2021_4451

CVE-2021-20232

OESA-2021-1109

OPENSUSE-SU-2021:0470-1

OPENSUSE-SU-2021_0470-1

OPENSUSE-SU-2024:10801-1

RHSA-2021:4451

RHSA-2021_4451

RLSA-2021:4451

SUSE-SU-2021:0934-1

SUSE-SU-2021:0935-1

USN-5029-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Gnutls

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 81

• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-20232 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-20232 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:4451 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-20232 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10801-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0935-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2021-4451.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5029-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20232 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00220 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-20232 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-20231 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0470-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47 · Vendor Advisory