Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Multiple vulnerabilities in GnuTLS have been identified, primarily affecting Ubuntu 18.04 LTS and 20.04 LTS. A timing side-channel vulnerability (CVE-2024-0553) could allow remote attackers to recover sensitive information. Additionally, issues with DER-encoded certificates (CVE-2024-12243) and PKCS...
A series of vulnerabilities in GnuTLS, discovered by researchers including Joshua Rogers and Oleh Konko, affect multiple Ubuntu releases. These vulnerabilities could allow remote attackers to exploit malformed DTLS handshake fragments and improperly validated OCSP responses, potentially leading to d...
Multiple TLS libraries have been found to inconsistently enforce X.509 Name Constraints, leading to potential security risks. Libraries such as GnuTLS, Go, OpenSSL, and pyca/cryptography exhibit varying behaviors in DNS name comparison, IP address handling, and URI parsing. Notable CVEs include CVE-...
SUSE has released updates addressing a critical buffer overflow vulnerability (CVE-2026-25506) in the munge package, affecting multiple SUSE Linux versions. The vulnerability, which was published on February 10, 2026, could allow for potential exploitation if not patched. Users are advised to apply...
