DeutschShown in its original language — a full translation is planned for a future version.
GnuTLS: Mehrere Schwachstellen
view advisory published 2026-04-29
Ein Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-42014US | — | — | ||
A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an… | ||||
| CVE-2026-5419US | — | — | ||
A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak… | ||||
| CVE-2026-5260US | — | — | ||
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token,… | ||||
| CVE-2026-42015US | — | — | ||
A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a P… | ||||
| CVE-2026-42013US | — | — | ||
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Co… | ||||
| CVE-2026-42012US | — | — | ||
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Serv… | ||||
| CVE-2026-42009US | — | — | ||
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible f… | ||||
| CVE-2026-42011US | — | — | ||
A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name… | ||||
| CVE-2026-42010US | critical9.8 | — | ||
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated username… | ||||
| CVE-2026-33846US | — | — | ||
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragmen… | ||||
| CVE-2026-3833US | high7.4 | — | ||
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Nam… | ||||
| CVE-2026-3832US | — | — | ||
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS han… | ||||
| CVE-2026-33845US | critical9.1 | — | ||
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-o… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2026-20612 vom 2026-06-27external
- Oracle Linux Security Advisory ELSA-2026-34372 vom 2026-08-07external
- Red Hat Security Advisory RHSA-2026:13274 vom 2026-05-03external
- Red Hat Security Advisory RHSA-2026:20611 vom 2026-05-27external
- Red Hat Security Advisory RHSA-2026:26319 vom 2026-06-16external
- Red Hat Security Advisory RHSA-2026:26409 vom 2026-06-16external
- Red Hat Security Advisory RHSA-2026:28010 vom 2026-06-22external
- Red Hat Security Advisory RHSA-2026:29197 vom 2026-06-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan