CVE-2021-4209

Name of the Vulnerable Software and Affected Versions GnuTLS (affected versions not specified)

Description A NULL pointer dereference flaw was found in GnuTLS, related to the implementation of the wrap nettle hash fast() function in the cryptographic library. This flaw can cause undefined behavior when providing zero-length input to Nettle's hash update functions, which internally call memcpy(). The issue can lead to a denial of service after authentication in rare circumstances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.