K000163346: GnuTLS vulnerability CVE-2026-3833

Security Advisory Description A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploi...

K000163347: GnuTLS vulnerability CVE-2026-33845

Security Advisory Description A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure ...

K000163345: GnuTLS vulnerability CVE-2026-3832

Security Advisory Description A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a clien...

K000163349: Gnutls vulnerability CVE-2026-5419

Security Advisory Description A flaw was found in gnutls. The PKCS7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. Th...

EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-3868)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...

EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-3833)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...

EUVD-2026-83613

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

Linux Distros Unpatched Vulnerability : CVE-2026-94055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. CVE-2026-94055 Note that Nessus relies on the presence of...

DEBIAN-CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

UBUNTU-CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

Exim versions prior to 4.100.1 are vulnerable to a use-after-free flaw when utilized with GnuTLS under specific non-default TLS settings. This vulnerability could allow a remote attacker to trigger a system crash, resulting in a denial of service (DoS) . To mitigate this risk, users should disabl...

CVE-2026-94055

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055: Use After Free

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

PT-2026-95879

Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.100.1 Description A use-after-free issue exists when specific non-default TLS settings are utilized in conjunction with GnuTLS. A use-after-free is a memory corruption flaw where an application continues to use a point...