CVE-2019-3836 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later which can be triggered by certain post-handshake messages.