An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a no_renegotiation alert is sent with unexpected timing, and then an invalid second handshake occurs. The crash happens in the application’s error handling path, where the gnutls_deinit function is called after detecting a handshake failure.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24659
Reference (s):
- https://security.netapp.com/advisory/ntap-20200911-0006/
- FEDORA:FEDORA-2020-0ab6656303
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/62BUAI4FQQLG6VTKRT7SUZPGJJ4NASQ3/
- FEDORA:FEDORA-2020-de51ee7cc9
- URL: https://lists.fedoraproject.org/archives/list/[email protected]/message/AWN56FDLQQXT2D2YHNI4TYH432TDMQ7N/