{"id":"CVE-2026-3833","title":"A flaw was found in gnutls","summary":"A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `perm…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","cwe":["CWE-178"],"vendor":"gnu","product":"gnutls","affected":["gnutls","hardened_images","openshift_container_platform = 4.0","enterprise_linux = 6.0","enterprise_linux = 7.0","enterprise_linux = 8.0","enterprise_linux = 9.0","enterprise_linux = 10.0"],"patched":["enterprise_linux_server_v_7_els","openshift_container_platform 4.12","openshift_container_platform 4.16","openshift_container_platform 4.17","openshift_container_platform 4.19","enterprise_linux_appstream_eus_v_10_0","enterprise_linux_appstream_v_10","enterprise_linux_appstream_v_8","enterprise_linux_appstream_aus_v_8_4","enterprise_linux_appstream_eus_extension_v_8_4","enterprise_linux_appstream_aus_v_8_6","enterprise_linux_appstream_eus_extension_v_8_6","enterprise_linux_appstream_e4s_v_8_8","enterprise_linux_appstream_tus_v_8_8","enterprise_linux_appstream_e4s_v_9_2","enterprise_linux_appstream_e4s_v_9_4","enterprise_linux_appstream_eus_v_9_6","enterprise_linux_appstream_v_9","enterprise_linux_baseos_eus_v_10_0","enterprise_linux_baseos_v_10","enterprise_linux_baseos_v_8","enterprise_linux_baseos_aus_v_8_4","enterprise_linux_baseos_eus_extension_v_8_4","enterprise_linux_baseos_aus_v_8_6","enterprise_linux_baseos_eus_extension_v_8_6","enterprise_linux_baseos_e4s_v_8_8","enterprise_linux_baseos_tus_v_8_8","enterprise_linux_baseos_e4s_v_9_2","enterprise_linux_baseos_e4s_v_9_4","enterprise_linux_baseos_eus_v_9_6","enterprise_linux_baseos_v_9","discovery 2","hardened_images","update_infrastructure 5"],"published":"2026-04-30","updated":"2026-09-17","sourceUpdated":"2026-09-17T19:16:45.917","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:13274","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20611","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20612","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:20613","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:26319","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:26409","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:29197","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:30004","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:30849","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:30850","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:32962","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:33125","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:41921","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:43575","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:57402","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:59831","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:60019","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:62409","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:62549","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:65839","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:65851","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-3833","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2445763","label":"secalert@redhat.com"},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1803","label":"secalert@redhat.com"},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1803","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3833.json"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3833"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3833"}],"tags":["nvd","cve.org","exploit-available","csaf","vex","red-hat"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-04-30T18:37:27.251775Z"},"epss":0.00565,"epssPercentile":0.45445,"ingestedAt":"2026-06-26T16:43:13.634Z","slug":"CVE-2026-3833","body":"## Overview\n\nA flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.\n\n## Affected\n\n- `gnutls`\n- `hardened_images`\n- `openshift_container_platform = 4.0`\n- `enterprise_linux = 6.0`\n- `enterprise_linux = 7.0`\n- `enterprise_linux = 8.0`\n- `enterprise_linux = 9.0`\n- `enterprise_linux = 10.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2026:43575** · Red Hat · fixed in: Red Hat Enterprise Linux Server (v. 7 ELS) · released 2026-07-22 · [advisory](https://access.redhat.com/errata/RHSA-2026:43575)\n- **RHSA-2026:59831** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.12 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:59831)\n- **RHSA-2026:62549** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.16 · released 2026-09-10 · [advisory](https://access.redhat.com/errata/RHSA-2026:62549)\n- **RHSA-2026:60019** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.17 · released 2026-09-03 · [advisory](https://access.redhat.com/errata/RHSA-2026:60019)\n- **RHSA-2026:57402** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.19 · released 2026-08-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:57402)\n- **RHSA-2026:26409** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0) · released 2026-06-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:26409)\n- **RHSA-2026:20613** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10) · released 2026-05-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:20613)\n- **RHSA-2026:20611** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux BaseOS (v. 8) · released 2026-05-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:20611)\n- **RHSA-2026:33125** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat Enterprise Linux BaseOS AUS (v.8.4), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) · released 2026-06-29 · [advisory](https://access.redhat.com/errata/RHSA-2026:33125)\n- **RHSA-2026:30849** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6), Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) · released 2026-06-29 · [advisory](https://access.redhat.com/errata/RHSA-2026:30849)\n- **RHSA-2026:30850** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8), Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8) · released 2026-06-29 · [advisory](https://access.redhat.com/errata/RHSA-2026:30850)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat OpenShift Container Platform 4 · updated 2026-09-17 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3833.json)\n- **RHSA-2026:62409** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.14 · released 2026-09-14 · [advisory](https://access.redhat.com/errata/RHSA-2026:62409)\n- **RHSA-2026:65851** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.18 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:65851)\n- **RHSA-2026:65839** · Red Hat · fixed in: Red Hat OpenShift Container Platform 4.13 · released 2026-09-17 · [advisory](https://access.redhat.com/errata/RHSA-2026:65839)","depth":"twilight","depthScore":48,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":201616,"id":"CVE-2026-3833","ts":1789399556986,"field":"exploit_available","old":"false","new":"true"},{"seq":200348,"id":"CVE-2026-3833","ts":1789397147596,"field":"exploit_available","old":"true","new":"false"},{"seq":198272,"id":"CVE-2026-3833","ts":1789391779752,"field":"exploit_available","old":"false","new":"true"},{"seq":196065,"id":"CVE-2026-3833","ts":1789383435341,"field":"exploit_available","old":"true","new":"false"},{"seq":194994,"id":"CVE-2026-3833","ts":1789380340256,"field":"exploit_available","old":"false","new":"true"},{"seq":193781,"id":"CVE-2026-3833","ts":1789378300804,"field":"exploit_available","old":"true","new":"false"},{"seq":192568,"id":"CVE-2026-3833","ts":1789376283359,"field":"exploit_available","old":"false","new":"true"},{"seq":191355,"id":"CVE-2026-3833","ts":1789373158607,"field":"exploit_available","old":"true","new":"false"},{"seq":190140,"id":"CVE-2026-3833","ts":1789369157264,"field":"exploit_available","old":"false","new":"true"},{"seq":188927,"id":"CVE-2026-3833","ts":1789368059562,"field":"exploit_available","old":"true","new":"false"},{"seq":187710,"id":"CVE-2026-3833","ts":1789365029993,"field":"exploit_available","old":"false","new":"true"},{"seq":186497,"id":"CVE-2026-3833","ts":1789363041979,"field":"exploit_available","old":"true","new":"false"},{"seq":185283,"id":"CVE-2026-3833","ts":1789360988147,"field":"exploit_available","old":"false","new":"true"},{"seq":184070,"id":"CVE-2026-3833","ts":1789357972030,"field":"exploit_available","old":"true","new":"false"},{"seq":182322,"id":"CVE-2026-3833","ts":1789354127982,"field":"exploit_available","old":"false","new":"true"},{"seq":181115,"id":"CVE-2026-3833","ts":1789352973916,"field":"exploit_available","old":"true","new":"false"},{"seq":179908,"id":"CVE-2026-3833","ts":1789350038403,"field":"exploit_available","old":"false","new":"true"},{"seq":178701,"id":"CVE-2026-3833","ts":1789347879764,"field":"exploit_available","old":"true","new":"false"},{"seq":177494,"id":"CVE-2026-3833","ts":1789346199286,"field":"exploit_available","old":"false","new":"true"},{"seq":176287,"id":"CVE-2026-3833","ts":1789342786602,"field":"exploit_available","old":"true","new":"false"},{"seq":175741,"id":"CVE-2026-3833","ts":1789338582666,"field":"exploit_available","old":"false","new":"true"},{"seq":175611,"id":"CVE-2026-3833","ts":1789338411152,"field":"exploit_available","old":"true","new":"false"},{"seq":174406,"id":"CVE-2026-3833","ts":1789334623101,"field":"exploit_available","old":"false","new":"true"},{"seq":173201,"id":"CVE-2026-3833","ts":1789333262271,"field":"exploit_available","old":"true","new":"false"},{"seq":172015,"id":"CVE-2026-3833","ts":1789330911197,"field":"exploit_available","old":"false","new":"true"},{"seq":170829,"id":"CVE-2026-3833","ts":1789328417250,"field":"exploit_available","old":"true","new":"false"},{"seq":169624,"id":"CVE-2026-3833","ts":1789326932808,"field":"exploit_available","old":"false","new":"true"},{"seq":168419,"id":"CVE-2026-3833","ts":1789323481384,"field":"exploit_available","old":"true","new":"false"},{"seq":167214,"id":"CVE-2026-3833","ts":1789319393147,"field":"exploit_available","old":"false","new":"true"},{"seq":166009,"id":"CVE-2026-3833","ts":1789318335451,"field":"exploit_available","old":"true","new":"false"},{"seq":164804,"id":"CVE-2026-3833","ts":1789315570832,"field":"exploit_available","old":"false","new":"true"},{"seq":163599,"id":"CVE-2026-3833","ts":1789313285652,"field":"exploit_available","old":"true","new":"false"},{"seq":162394,"id":"CVE-2026-3833","ts":1789311730992,"field":"exploit_available","old":"false","new":"true"},{"seq":161189,"id":"CVE-2026-3833","ts":1789308301515,"field":"exploit_available","old":"true","new":"false"},{"seq":160694,"id":"CVE-2026-3833","ts":1789304231649,"field":"exploit_available","old":"false","new":"true"},{"seq":158532,"id":"CVE-2026-3833","ts":1789299321022,"field":"exploit_available","old":"true","new":"false"},{"seq":157496,"id":"CVE-2026-3833","ts":1789296477370,"field":"exploit_available","old":"false","new":"true"},{"seq":156291,"id":"CVE-2026-3833","ts":1789294413154,"field":"exploit_available","old":"true","new":"false"},{"seq":155086,"id":"CVE-2026-3833","ts":1789292671142,"field":"exploit_available","old":"false","new":"true"},{"seq":153881,"id":"CVE-2026-3833","ts":1789289390910,"field":"exploit_available","old":"true","new":"false"},{"seq":153093,"id":"CVE-2026-3833","ts":1789285302038,"field":"exploit_available","old":"false","new":"true"},{"seq":148027,"id":"CVE-2026-3833","ts":1789270904866,"field":"exploit_available","old":"true","new":"false"},{"seq":146067,"id":"CVE-2026-3833","ts":1789269190679,"field":"exploit_available","old":"false","new":"true"},{"seq":144970,"id":"CVE-2026-3833","ts":1789266137176,"field":"exploit_available","old":"true","new":"false"},{"seq":143874,"id":"CVE-2026-3833","ts":1789262473195,"field":"exploit_available","old":"false","new":"true"},{"seq":142710,"id":"CVE-2026-3833","ts":1789261223091,"field":"exploit_available","old":"true","new":"false"},{"seq":141546,"id":"CVE-2026-3833","ts":1789258630663,"field":"exploit_available","old":"false","new":"true"},{"seq":140348,"id":"CVE-2026-3833","ts":1789256435646,"field":"exploit_available","old":"true","new":"false"},{"seq":139150,"id":"CVE-2026-3833","ts":1789254610305,"field":"exploit_available","old":"false","new":"true"},{"seq":137952,"id":"CVE-2026-3833","ts":1789251604951,"field":"exploit_available","old":"true","new":"false"}]}