First published: Wed Sep 09 2020(Updated: )
It was discovered that GnuTLS incorrectly handled certain alerts when being used with TLS 1.3 servers. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/libgnutls30 | <3.6.13-2ubuntu1.3 | 3.6.13-2ubuntu1.3 |
=20.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-4491-1 is high.
This vulnerability in GnuTLS allows a remote attacker to cause a denial of service or possibly execute arbitrary code.
The affected software version is libgnutls30 3.6.13-2ubuntu1.3 on Ubuntu 20.04.
To fix the GnuTLS vulnerability, update to version 3.6.13-2ubuntu1.3 or later of libgnutls30 on Ubuntu 20.04.
You can find more information about USN-4491-1 at the following references: [CVE-2020-24659](https://ubuntu.com/security/CVE-2020-24659), [Ubuntu Security Notice](https://ubuntu.com/security/notices/USN-4491-1).