Vulnerabilities

TI-2026-26212 CVE-2026-33846 · GHSA-qcj7-gqxf-2cqq

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

MEDIUM 41

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01263 Published 2026-05-04 Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +44 CWE-130

TI-2026-26211 CVE-2026-33845 · GHSA-cmj5-x3xf-69wq

Gnutls: gnutls: denial of service via dtls zero-length fragment

MEDIUM 49

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02073 Published 2026-04-30 Partial fix · 3.8.13, 3.8.10-4.el10_2 +45 CWE-191

TI-2026-03321 CVE-2026-3833 · GHSA-6rgh-57xm-37v8

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

HIGH 72

A flaw was found in gnutls.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00565 Published 2026-04-30 Partial fix · 3.8.13, 3.8.10-4.el10_2 +42 CWE-178

Vulnerabilities

Filters

Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly

Gnutls: gnutls: denial of service via dtls zero-length fragment

Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison