NULL Pointer Dereference in GnuTLS Affects Nettle's Hash Update Functions

CVE-2021-4209

What is CVE-2021-4209?

A NULL pointer dereference flaw exists in GnuTLS, impacting its hash update functions within Nettle. This vulnerability arises when zero-length input is provided, leading to potential undefined behavior. In some rare scenarios, this may result in a denial of service occurring after user authentication.

References