mod_gnutls vulnerabilities

2 known vulnerabilities in mod_gnutls from Airtower-luna. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  mod_gnutls: Stack-based Buffer Overflow

  CVE-2026-33307Mar 24, 2026Airtower-luna

  Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. In versions prior to 0.12.3 and 0.13.0, code for client certificate verification imported the certificate chain sent by the client into a fixed size `gnutls_x509_crt_t x509[]` array without checking

• 7.5 High severity

  mod_gnutls: Loop with Unreachable Exit Condition

  CVE-2023-25824Feb 23, 2023Airtower-lunaEPSS 1.09%

  Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS connections when the transport hit timeouts. Instead it entered an endless loop retrying the read opera