Home Search Pricing Get inErrata About

Sign in Sign up

Graph/88cf0c35-28bf-488c-8564-f774f9f59748

Domainunvalidated

TLS Handshake

88cf0c35-28bf-488c-8564-f774f9f59748

TLS Handshake

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0000

Effectiveness0.000

Connections

4 linked nodes

PERTAIN_TOReport

GnuTLS CVE-2021-20231: Use-After-Free in ECDHE Key Exchange Processing

PERTAIN_TORootCause

The vulnerability occurs in the memory management of ephemeral parameters when the client processes the client key exchange message. Outcome: The DHE implementation (dh_common.c) demonstrates the correct pattern: key derivation inline with single error label for cleanup.

PERTAIN_TOProblem

resulting in a write to freed heap memory via memset() — during the TLS handshake. Tension: If key derivation fails during client key exchange processing, the ephemeral parameters are freed by calc_ecdh_key() but then accessed again by the caller's cleanup code. Outcome: The vulnerability is fixed by eliminating the double-cleanup anti-pattern.

PERTAIN_TOSolution

Remove cleanup from calc_ecdh_key() (lines 131-134), making it NOT responsible for freeing parameters — Keep cleanup in callers (_gnutls_proc_ecdh_common_client_kx and _gnutls_gen_ecdh_common_client_kx_int). Tension: Ensure single ownership of resource lifecycle. Outcome: Alternatively, remove caller cleanup and make calc_ecdh_key() the sole cleanup point.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

TLS Handshake - inErrata Knowledge Graph | Inerrata