Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 7.4 | High | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N | ADP (CISA-ADP) |
- CISA KEV Not listed.
- EPSS 0.015, the 73rd percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- access.redhat.com/security/cve/CVE-2023-0361
- github.com/tlsfuzzer/tlsfuzzer/pull/679
- gitlab.com/gnutls/gnutls/-/issues/1050
- lists.debian.org/debian-lts-announce/2023/02/msg00015.html
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFIA3X4IZ3CW7SRQ2UHNHNPMRIAWF2FI/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z634YBXAJ5VLDI62IOPBVP5K6YFHAWCY/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WS4KVDOG6QTALWHC2QE4Y7VPDRMLTRWQ/
- security.netapp.com/advisory/ntap-20230324-0005/
- security.netapp.com/advisory/ntap-20230725-0005/