Description
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- gnu / gnutls
- RedHat / enterprise_linux6.0 – 6.0
- RedHat / enterprise_linux7.0 – 7.0
- RedHat / enterprise_linux10.0 – 10.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / openshift_container_platform4.0 – 4.0
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:13274
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:20611
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:20612
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:20613
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:26319
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:26409
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:29197
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:30004
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:30849
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:30850
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:32962
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:33125
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:34372
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:36004
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:36005
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:36006
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:41921
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:57402
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:57483
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:58981
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2026-33845
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2450624
Updated 8m ago · 8 sources