Vulnerabilities > CVE-2021-4209 - NULL Pointer Dereference vulnerability in multiple products

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

NVD

Published: 2022-08-24

Updated: 2022-10-27

Summary

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

Vulnerable Configurations

Part	Description	Count
Application	Gnu GNU Gnutls - GNU Gnutls 1.0.16 GNU Gnutls 1.0.17 GNU Gnutls 1.0.18 GNU Gnutls 1.0.19 GNU Gnutls 1.0.20 GNU Gnutls 1.0.21 GNU Gnutls 1.0.22 GNU Gnutls 1.0.23 GNU Gnutls 1.0.24 GNU Gnutls 1.0.25 GNU Gnutls 1.1.13 GNU Gnutls 1.1.14 GNU Gnutls 1.1.15 GNU Gnutls 1.1.16 GNU Gnutls 1.1.17 GNU Gnutls 1.1.18 GNU Gnutls 1.1.19 GNU Gnutls 1.1.20 GNU Gnutls 1.1.21 GNU Gnutls 1.1.22 GNU Gnutls 1.1.23 GNU Gnutls 1.2.0 GNU Gnutls 1.2.1 GNU Gnutls 1.2.2 GNU Gnutls 1.2.3 GNU Gnutls 1.2.4 GNU Gnutls 1.2.5 GNU Gnutls 1.2.6 GNU Gnutls 1.2.7 GNU Gnutls 1.2.8 GNU Gnutls 1.2.8.1A1 GNU Gnutls 1.2.9 GNU Gnutls 1.2.10 GNU Gnutls 1.2.11 GNU Gnutls 1.3.0 GNU Gnutls 1.3.1 GNU Gnutls 1.3.2 GNU Gnutls 1.3.3 GNU Gnutls 1.3.4 GNU Gnutls 1.3.5 GNU Gnutls 1.4.0 GNU Gnutls 1.4.1 GNU Gnutls 1.4.2 GNU Gnutls 1.4.3 GNU Gnutls 1.4.4 GNU Gnutls 1.4.5 GNU Gnutls 1.5.0 GNU Gnutls 1.5.1 GNU Gnutls 1.5.2 GNU Gnutls 1.5.3 GNU Gnutls 1.5.4 GNU Gnutls 1.5.5 GNU Gnutls 1.6.0 GNU Gnutls 1.6.1 GNU Gnutls 1.6.2 GNU Gnutls 1.6.3 GNU Gnutls 1.7.0 GNU Gnutls 1.7.1 GNU Gnutls 1.7.2 GNU Gnutls 1.7.3 GNU Gnutls 1.7.4 GNU Gnutls 1.7.5 GNU Gnutls 1.7.6 GNU Gnutls 1.7.7 GNU Gnutls 1.7.8 GNU Gnutls 1.7.9 GNU Gnutls 1.7.10 GNU Gnutls 1.7.11 GNU Gnutls 1.7.12 GNU Gnutls 1.7.13 GNU Gnutls 1.7.14 GNU Gnutls 1.7.15 GNU Gnutls 1.7.16 GNU Gnutls 1.7.17 GNU Gnutls 1.7.18 GNU Gnutls 1.7.19 GNU Gnutls 2.0.0 GNU Gnutls 2.0.1 GNU Gnutls 2.0.2 GNU Gnutls 2.0.3 GNU Gnutls 2.0.4 GNU Gnutls 2.1.0 GNU Gnutls 2.1.1 GNU Gnutls 2.1.2 GNU Gnutls 2.1.3 GNU Gnutls 2.1.4 GNU Gnutls 2.1.5 GNU Gnutls 2.1.6 GNU Gnutls 2.1.7 GNU Gnutls 2.1.8 GNU Gnutls 2.2.0 GNU Gnutls 2.2.1 GNU Gnutls 2.2.2 GNU Gnutls 2.2.3 GNU Gnutls 2.2.4 GNU Gnutls 2.2.5 GNU Gnutls 2.3.0 GNU Gnutls 2.3.1 GNU Gnutls 2.3.2 GNU Gnutls 2.3.3 GNU Gnutls 2.3.4 GNU Gnutls 2.3.5 GNU Gnutls 2.3.6 GNU Gnutls 2.3.7 GNU Gnutls 2.3.8 GNU Gnutls 2.3.9 GNU Gnutls 2.3.10 GNU Gnutls 2.3.11 GNU Gnutls 2.4.0 GNU Gnutls 2.4.1 GNU Gnutls 2.4.2 GNU Gnutls 2.4.3 GNU Gnutls 2.5.0 GNU Gnutls 2.6.0 GNU Gnutls 2.6.1 GNU Gnutls 2.6.2 GNU Gnutls 2.6.3 GNU Gnutls 2.6.4 GNU Gnutls 2.6.5 GNU Gnutls 2.6.6 GNU Gnutls 2.7.0 GNU Gnutls 2.7.1 GNU Gnutls 2.7.2 GNU Gnutls 2.7.3 GNU Gnutls 2.7.4 GNU Gnutls 2.7.5 GNU Gnutls 2.7.6 GNU Gnutls 2.8.0 GNU Gnutls 2.8.1 GNU Gnutls 2.8.2 GNU Gnutls 2.8.3 GNU Gnutls 2.8.4 GNU Gnutls 2.8.5 GNU Gnutls 2.8.6 GNU Gnutls 2.10.0 GNU Gnutls 2.10.1 GNU Gnutls 2.10.2 GNU Gnutls 2.10.3 GNU Gnutls 2.10.4 GNU Gnutls 2.10.5 GNU Gnutls 2.12.0 GNU Gnutls 2.12.1 GNU Gnutls 2.12.2 GNU Gnutls 2.12.3 GNU Gnutls 2.12.4 GNU Gnutls 2.12.5 GNU Gnutls 2.12.6 GNU Gnutls 2.12.6.1 GNU Gnutls 2.12.7 GNU Gnutls 2.12.8 GNU Gnutls 2.12.9 GNU Gnutls 2.12.10 GNU Gnutls 2.12.11 GNU Gnutls 2.12.12 GNU Gnutls 2.12.13 GNU Gnutls 2.12.14 GNU Gnutls 2.12.15 GNU Gnutls 2.12.16 GNU Gnutls 2.12.17 GNU Gnutls 2.12.18 GNU Gnutls 2.12.19 GNU Gnutls 2.12.20 GNU Gnutls 2.12.21 GNU Gnutls 2.12.22 GNU Gnutls 2.12.23 GNU Gnutls 2.12.24 GNU Gnutls 3.0 GNU Gnutls 3.0.0 GNU Gnutls 3.0.1 GNU Gnutls 3.0.2 GNU Gnutls 3.0.3 GNU Gnutls 3.0.4 GNU Gnutls 3.0.5 GNU Gnutls 3.0.6 GNU Gnutls 3.0.7 GNU Gnutls 3.0.8 GNU Gnutls 3.0.9 GNU Gnutls 3.0.10 GNU Gnutls 3.0.11 GNU Gnutls 3.0.12 GNU Gnutls 3.0.13 GNU Gnutls 3.0.14 GNU Gnutls 3.0.15 GNU Gnutls 3.0.16 GNU Gnutls 3.0.17 GNU Gnutls 3.0.18 GNU Gnutls 3.0.19 GNU Gnutls 3.0.20 GNU Gnutls 3.0.21 GNU Gnutls 3.0.22 GNU Gnutls 3.0.23 GNU Gnutls 3.0.24 GNU Gnutls 3.0.25 GNU Gnutls 3.0.26 GNU Gnutls 3.0.27 GNU Gnutls 3.0.28 GNU Gnutls 3.0.29 GNU Gnutls 3.0.30 GNU Gnutls 3.0.31 GNU Gnutls 3.0.32 GNU Gnutls 3.1.0 GNU Gnutls 3.1.1 GNU Gnutls 3.1.2 GNU Gnutls 3.1.3 GNU Gnutls 3.1.4 GNU Gnutls 3.1.5 GNU Gnutls 3.1.6 GNU Gnutls 3.1.7 GNU Gnutls 3.1.8 GNU Gnutls 3.1.9 GNU Gnutls 3.1.10 GNU Gnutls 3.1.11 GNU Gnutls 3.1.12 GNU Gnutls 3.1.13 GNU Gnutls 3.1.14 GNU Gnutls 3.1.15 GNU Gnutls 3.1.16 GNU Gnutls 3.1.17 GNU Gnutls 3.1.18 GNU Gnutls 3.1.19 GNU Gnutls 3.1.20 GNU Gnutls 3.1.21 GNU Gnutls 3.1.22 GNU Gnutls 3.1.23 GNU Gnutls 3.1.24 GNU Gnutls 3.1.25 GNU Gnutls 3.1.26 GNU Gnutls 3.1.27 GNU Gnutls 3.1.28 GNU Gnutls 3.2.0 GNU Gnutls 3.2.1 GNU Gnutls 3.2.2 GNU Gnutls 3.2.3 GNU Gnutls 3.2.4 GNU Gnutls 3.2.5 GNU Gnutls 3.2.6 GNU Gnutls 3.2.7 GNU Gnutls 3.2.8 GNU Gnutls 3.2.8.1 GNU Gnutls 3.2.9 GNU Gnutls 3.2.10 GNU Gnutls 3.2.11 GNU Gnutls 3.2.12 GNU Gnutls 3.2.12.1 GNU Gnutls 3.2.13 GNU Gnutls 3.2.14 GNU Gnutls 3.2.15 GNU Gnutls 3.2.16 GNU Gnutls 3.2.17 GNU Gnutls 3.2.18 GNU Gnutls 3.2.19 GNU Gnutls 3.2.20 GNU Gnutls 3.2.21 GNU Gnutls 3.3.0 GNU Gnutls 3.3.1 GNU Gnutls 3.3.2 GNU Gnutls 3.3.3 GNU Gnutls 3.3.4 GNU Gnutls 3.3.5 GNU Gnutls 3.3.6 GNU Gnutls 3.3.7 GNU Gnutls 3.3.8 GNU Gnutls 3.3.9 GNU Gnutls 3.3.10 GNU Gnutls 3.3.11 GNU Gnutls 3.3.12 GNU Gnutls 3.3.13 GNU Gnutls 3.3.14 GNU Gnutls 3.3.15 GNU Gnutls 3.3.16 GNU Gnutls 3.3.17 GNU Gnutls 3.3.18 GNU Gnutls 3.3.19 GNU Gnutls 3.3.20 GNU Gnutls 3.3.21 GNU Gnutls 3.3.22 GNU Gnutls 3.3.23 GNU Gnutls 3.3.24 GNU Gnutls 3.3.25 GNU Gnutls 3.3.26 GNU Gnutls 3.3.27 GNU Gnutls 3.3.28 GNU Gnutls 3.3.29 GNU Gnutls 3.3.30 GNU Gnutls 3.4.0 GNU Gnutls 3.4.1 GNU Gnutls 3.4.2 GNU Gnutls 3.4.3 GNU Gnutls 3.4.4 GNU Gnutls 3.4.4.1 GNU Gnutls 3.4.5 GNU Gnutls 3.4.6 GNU Gnutls 3.4.7 GNU Gnutls 3.4.8 GNU Gnutls 3.4.9 GNU Gnutls 3.4.10 GNU Gnutls 3.4.11 GNU Gnutls 3.4.12 GNU Gnutls 3.4.13 GNU Gnutls 3.4.14 GNU Gnutls 3.4.15 GNU Gnutls 3.4.16 GNU Gnutls 3.4.17 GNU Gnutls 3.5.0 GNU Gnutls 3.5.1 GNU Gnutls 3.5.2 GNU Gnutls 3.5.3 GNU Gnutls 3.5.4 GNU Gnutls 3.5.5 GNU Gnutls 3.5.6 GNU Gnutls 3.5.7 GNU Gnutls 3.5.8 GNU Gnutls 3.5.9 GNU Gnutls 3.5.10 GNU Gnutls 3.5.11 GNU Gnutls 3.5.12 GNU Gnutls 3.5.13 GNU Gnutls 3.5.14 GNU Gnutls 3.5.15 GNU Gnutls 3.5.16 GNU Gnutls 3.5.17 GNU Gnutls 3.5.18 GNU Gnutls 3.5.19 GNU Gnutls 3.6.0 GNU Gnutls 3.6.1 GNU Gnutls 3.6.2 GNU Gnutls 3.6.3 GNU Gnutls 3.6.4 GNU Gnutls 3.6.5 GNU Gnutls 3.6.6 GNU Gnutls 3.6.7 GNU Gnutls 3.6.8 GNU Gnutls 3.6.8-11.El8_2 GNU Gnutls 3.6.9 GNU Gnutls 3.6.10 GNU Gnutls 3.6.11 GNU Gnutls 3.6.12 GNU Gnutls 3.6.13 GNU Gnutls 3.6.14 GNU Gnutls 3.6.15 GNU Gnutls 3.6.16 GNU Gnutls 3.7.0 GNU Gnutls 3.7.1 GNU Gnutls 3.7.2	346
Application	Netapp Netapp Solidfire & HCI Management Node - Netapp Active IQ Unified Manager - Netapp HCI Bootstrap OS -	3
OS	Redhat Redhat Enterprise Linux 8.0	1
Hardware	Netapp Netapp HCI Compute Node -	1

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References