ZeroDay Findings
Sign inSign up

Findings

CVE-2021-20232

A flaw was found in gnutls.

Published Mar 12, 2021 · updated Oct 14, 2026 · gnu gnutls

A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 12, 2021 · NIST NVD

    Detected

    A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

Affected

  • cpe fedoraproject/fedora34
  • cpe gnu/gnutlsversion unspecified
  • cpe redhat/enterprise linux8.0

Sources

  • CVE.orgVulnerability recordCVE-2021-20232

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-20232

    30-day exploitation probability 3.5%

    first.org
  • NIST NVDVulnerability recordCVE-2021-20232

    A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences.

    nvd.nist.gov

References