AZL-37108

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-37108.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-37108

Upstream

CVE-2024-28835

Published

2024-03-21T06:15:45Z

Modified

2026-04-01T05:13:11.878615Z

Summary

CVE-2024-28835 affecting package gnutls for versions less than 3.8.3-2

Details

A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the "certtool --verify-chain" command.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-28835

Affected packages

Azure Linux:3 / gnutls

Package

Name: gnutls
Purl: pkg:rpm/azure-linux/gnutls

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.3-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-37108.json"