5394 matches found
AZL-107445 CVE-2026-88647 affecting package gnutls 3.8.13-1
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
UBUNTU-CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
K000163593: GnuTLS vulnerability CVE-2026-42009
Security Advisory Description A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with...
K000163594: GnuTLS vulnerability CVE-2026-42010
Security Advisory Description A flaw was found in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading ...
CVE-2026-88648: Undefined Security Weakness
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
CVE-2026-67693: Time-of-check Time-of-use (TOCTOU) Race Condition
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...
CVE-2026-95210: Improper Certificate Validation
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-95209: Uncontrolled Resource Consumption
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...
CVE-2026-95184: Uncontrolled Resource Consumption
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
PT-2026-108118
Name of the Vulnerable Software and Affected Versions gnutls version 3.8.13 Description Improper certificate validation causes the application to reject legitimate certificates for valid users, resulting in a Denial of Service DoS, which is a condition where a service is unavailable to its intend...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
EUVD-2026-95140
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
PT-2026-108163
Name of the Vulnerable Software and Affected Versions gnutls version 3.8.13 Description An issue causes legitimate CA certificates to be rejected, which results in a Denial of Service DoS, a condition where a system or service becomes unavailable to its intended users. Recommendations At the...