CVE-2026-88648

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

PT-2026-108051

Name of the Vulnerable Software and Affected Versions GnuTLS version 3.8.13 Description A hostname verification bypass allows attackers to circumvent the Common Name fallback mechanism, which is a process used to verify the identity of a server when the Subject Alternative Name is missing. This...

PT-2026-108158

Name of the Vulnerable Software and Affected Versions gnutls version 3.8.13 Description An issue exists where the software fails to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU, which could allow an attacker to obtain...

CVE-2026-88647: Improper Validation of Certificate with Host Mismatch

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

CVE-2026-95184

A flaw in gnutls v3.8.13 involving improper certificate validation causes the application to reject legitimate certificates from valid users. This issue results in a Denial of Service (DoS) condition. The vulnerability has been addressed in the gnutls28 package for Debian 13 and Debian 12 , with ...

CVE-2026-95210

The gnutls cryptographic library (specifically version v3.8.13 ) contains a vulnerability in the check_for_unknown_exts() function due to errors in the certificate validation process. This flaw allows the application to accept certificates containing invalid extensions , which could enable a mali...

CVE-2026-88648

A flaw in the X.509 certificate validation mechanism within GnuTLS v3.8.13 allows an attacker controlling a subordinate Certificate Authority (CA) to bypass cross-domain PKI restrictions . This vulnerability enables the issuance and acceptance of unauthorized certificates , which can be used to i...

CVE-2026-67693

A flaw in gnutls v.3.8.13 allows a remote attacker to obtain sensitive information by presenting a specially crafted end-entity X.509 certificate. The vulnerability stems from the software's failure to reject certificates containing contradictory Key Usage (KU) and Extended Key Usage (EKU) extens...

CVE-2026-95209

An issue in gnutls v3.8.13 causes legitimate Certificate Authority (CA) certificates to be rejected, resulting in a Denial of Service (DoS) . This vulnerability affects various distributions, including Debian , Ubuntu , and SUSE . A Nessus plugin indicates that some Linux distributions may have p...

CVE-2026-95210

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...

EUVD-2026-95205

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

EUVD-2026-95204

An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...

CVE-2026-88648

Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...

Astra Linux – Vulnerability in gnutls28

A flaw in GnuTLS’ DTLS handshake parsing allows for malformed fragments with zero length and non-zero offsets. This leads to an integer underflow during reassembly, resulting in an out-of-bounds read. This issue is remotely exploitable and could cause information disclosure or denial of service...

Astra Linux – Vulnerability in gnutls28

There is a heap buffer overflow vulnerability in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in the mergehandshakepacket function, where incoming handshake fragments are matched and merged solely based on the handshake type, without verifying that the messagelength...

Rocky Linux update in Brocade ASCG OVA 3.5.0

Multiple third-party open-source components integrated within the ASCG platform including the Linux Kernel, OpenSSL, GnuTLS, BIND, libxml2, and container tools were evaluated for known CVEs. The majority of identified vulnerabilities reside in non-executable code paths or are mitigated by...

Rocky Linux 9.2 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (ciqsa-2026_0423)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260423 advisory. This advisory aggregates security fixes for the gnutls SRPM in CIQ LTS 9.2. It addresses 10 CVEs: CVE-2023-5981, CVE-2006-4790, CVE-2024-0553,...

CentOS Linux 8 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (CENTOS-STREAM8:CLSA-2025:1759335207)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1759335207 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEV...

Rocky Linux 8 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (crlsa-2021_4451)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214451 advisory. nettle: Remote crash in RSA decryption via manipulated ciphertext CVE-2021-3580 gnutls: Use after free in client keyshare extension CVE-2021-20231 gnutls:...

Rocky Linux 9 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (crlsa-2024_2570)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242570 advisory. gnutls: vulnerable to Minerva side-channel information leak CVE-2024-28834 gnutls: potential crash during chain building/verification CVE-2024-28835 Tenabl...