CVE-2019-3836 Vulnerability Details

  /     /     /  

CVE-2019-3836 Metadata Quick Info

CVE Published: 01/04/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: redhat | Vendor: gnutls | Product: gnutls
Status : PUBLISHED

---

CVE-2019-3836 Description

It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-456
CWE Name: CWE-456
Source: gnutls

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).