GnuTLS verify_crt() Use-After-Free
Posted by deepcore on March 28, 2019 – 11:05 pm
This is a critical memory corruption vulnerability in any API backed by verify_crt(), including gnutls_x509_trust_list_verify_crt() and related routines in GnuTLS.
Post a reply
You must be logged in to post a comment.