CVE:CVE-2020-24659
CNNVD:CNNVD-202009-300
GnuTLS是一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。
GnuTLS 3.6.15之前版本中存在代码问题漏洞。攻击者借助该漏洞可导致应用程序崩溃。
solution:Upgrade gnu gnutls to a higher version than 3.6.15,and avoid the version (,3.6.15); Upgrade fedoraproject fedora to a higher version than 32,33,and avoid the version 32,33; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade canonical ubuntu_linux to a higher version than 20.04,and avoid the version 20.04