VulnSea

gnutls vulnerabilities

CVEs whose affected-version data names the gnutls package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

9 CVEsRSS

CVE-2026-42009High· 7.5
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not cor…

Twilightgnu · gnutlsEPSS 1.3%via NVD
CVE-2026-42010High· 7.1
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a spec…

Twilightgnu · gnutlsEPSS 1.1%via NVD
CVE-2026-33846High· 7.5
4mo ago

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type,…

TwilightRed Hat · gnutlsEPSS 1.3%via NVD
CVE-2026-3833Medium· 6.5PoC
4mo ago

A flaw was found in gnutls

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `perm…

Twilightgnu · gnutlsEPSS 0.56%via NVD
CVE-2026-33845High· 7.5
4mo ago

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may…

Twilightgnu · gnutlsEPSS 0.80%via NVD
CVE-2026-1584High· 7.5
5mo ago

A flaw was found in gnutls

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to…

Twilightgnu · gnutlsEPSS 1.3%via NVD
CVE-2025-32990Medium· 6.5
1y ago

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OO…

Sunlitgnu · gnutlsEPSS 0.79%via NVD
CVE-2025-32989Medium· 5.3
1y ago

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing

A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a cer…

Sunlitgnu · gnutlsEPSS 1.3%via NVD
CVE-2025-32988Medium· 6.5
1y ago

A flaw was found in GnuTLS

A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malforme…

Sunlitgnu · gnutlsEPSS 1.3%via NVD
gnutls vulnerabilities (CVEs) · VulnSea