Medium · published August 24, 2022
A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/gnutls | < 3.7.3 | 3.7.3 |
| redhat/enterprise_linux | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| netapp/hci_bootstrap_os | all versions | — |