Mod Gnutls Project Mod Gnutls
4 CVEs affecting Mod Gnutls Project Mod Gnutls. Latest disclosed: 2026-03-24. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33307 | High | 7.5 | 2026-03-24 | Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. In versions prior to 0.12.3 and 0.13.0, code for client certificate verification imported the cert… |
CVE-2023-25824 | High | 7.5 | 2023-02-23 | Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS co… |
CVE-2009-5144 | High | 7.5 | 2018-02-03 | mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attackers to spoof client… |
CVE-2026-33308 | Medium | 6.8 | 2026-03-24 | Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Prior to version 0.13.0, code for client certificate verification did not check the key purpose as… |