CVE-2019-3836CWE-456

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be…

Medium · published April 1, 2019

CVSS v3.0
5.9
EPSS
3%
Percentile
88.8
In the wild
Unconfirmed
What it is

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03401 · 88.8th percentile
Weakness
CWE-456 · Missing Initialization of a Variable
Published
2019-04-01T14:16Z
EPSS history
Timeline
  • 01 APR 14:16Z
    It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be…
    cvelistv5