USN-4491-1: GnuTLS vulnerability
It was discovered that GnuTLS incorrectly handled certain alerts when being used with TLS 1.3 servers. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-4491-1?
The severity of USN-4491-1 is high.
How does this vulnerability affect GnuTLS?
This vulnerability in GnuTLS allows a remote attacker to cause a denial of service or possibly execute arbitrary code.
What is the affected software version?
The affected software version is libgnutls30 3.6.13-2ubuntu1.3 on Ubuntu 20.04.
How do I fix the GnuTLS vulnerability?
To fix the GnuTLS vulnerability, update to version 3.6.13-2ubuntu1.3 or later of libgnutls30 on Ubuntu 20.04.
Where can I find more information about USN-4491-1?
You can find more information about USN-4491-1 at the following references: [CVE-2020-24659](https://ubuntu.com/security/CVE-2020-24659), [Ubuntu Security Notice](https://ubuntu.com/security/notices/USN-4491-1).