Gnutls vulnerabilities

9 known vulnerabilities in Gnutls from GNU. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Red Hat Enterprise Linux 10: Undefined Behavior for Input to API

  CVE-2026-42009May 18, 2026Red HatEPSS 1.33%

  A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets w

• 9.8 Critical severity

  Red Hat Enterprise Linux 10: Improper Null Termination

  CVE-2026-42010May 7, 2026Red HatEPSS 1.05%

  A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username,

• 7.4 High severity

  Red Hat Enterprise Linux 10: Improper Handling of Case Sensitivity

  CVE-2026-3833Apr 30, 2026Red Hat

  A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remot

• 9.1 Critical severity

  Red Hat Enterprise Linux 10: Integer Underflow (Wrap or Wraparound)

  CVE-2026-33845Apr 30, 2026Red HatEPSS 2.07%

  A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disc

• 7.5 High severity

  Red Hat Hardened Images: NULL Pointer Dereference

  CVE-2026-1584Apr 9, 2026Red HatEPSS 1.37%

  A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer derefer

• 8.2 High severity

  Red Hat Enterprise Linux 10: Heap-based Buffer Overflow

  CVE-2025-32990Jul 10, 2025Red Hat

  A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write,

• 8.2 High severity

  Red Hat Enterprise Linux 10: Double Free

  CVE-2025-32988Jul 10, 2025Red HatEPSS 1.47%

  A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn

• 7.5 High severity

  Red Hat Enterprise Linux 9: Improper Verification of Cryptographic Signature

  CVE-2024-0567Jan 16, 2024Red HatEPSS 1.39%

  A vulnerability was found in GnuTLS, where a cockpit (which uses gnuTLS) rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote clie

• 7.5 High severity

  Red Hat Enterprise Linux 8: Observable Discrepancy

  CVE-2024-0553Jan 16, 2024Red HatEPSS 1.61%

  A vulnerability was found in GnuTLS. The response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from the response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue may allow a remote attacker to perform a timing side-channe