Skip to content
Critical GnuTLS Vulnerabilities Affecting Ubuntu Systems

Critical GnuTLS Vulnerabilities Affecting Ubuntu Systems

First seen 6 Jul 2026, 23:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •July 7, 2026 at 21:39 UTC
  • •GnuTLS vulnerabilities could lead to information disclosure and denial of service.
  • •Affected systems include Ubuntu 18.04 LTS and 20.04 LTS.
  • •Immediate updates are recommended to mitigate the identified risks.

Multiple vulnerabilities in GnuTLS have been identified, primarily affecting Ubuntu 18.04 LTS and 20.04 LTS. A timing side-channel vulnerability (CVE-2024-0553) could allow remote attackers to recover sensitive information. Additionally, issues with DER-encoded certificates (CVE-2024-12243) and PKCS11 token labels (CVE-2025-9820) could lead to denial of service or arbitrary code execution. The vulnerabilities were discovered by researchers including Bing Shi and Luigino Camastra. The affected systems are primarily Ubuntu 18.04 LTS, with some issues also impacting Ubuntu 20.04 LTS. Users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed in security advisories published on July 6, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 68d ago How this analysis works

Timeline

2024-01-16
CVE-2024-0553 published
A timing side-channel vulnerability in GnuTLS allowing information recovery was disclosed.
Ubuntu
2025-02-10
CVE-2024-12243 published
A vulnerability in GnuTLS that could lead to denial of service was published.
Ubuntu
2026-01-26
CVE-2025-9820 published
A flaw in GnuTLS related to PKCS11 token labels was disclosed, allowing potential crashes.
Ubuntu
2026-02-09
CVE-2025-14831 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-30
CVE-2026-33845 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-04-30
CVE-2026-3833 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-04
CVE-2026-33846 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-07
CVE-2026-42010 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-18
CVE-2026-42009 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-26
CVE-2026-5260 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (6)

Following this threat?

Track Ubuntu and CVE-2024-0553 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (30)

1 / 3