5095 matches found
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-94055
Exim versions prior to 4.100.1 are vulnerable to a use-after-free flaw when utilized with GnuTLS under specific non-default TLS settings. This vulnerability could allow a remote attacker to trigger a system crash, resulting in a denial of service (DoS) . To mitigate this risk, users should disabl...
PT-2026-95879
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.100.1 Description A use-after-free issue exists when specific non-default TLS settings are utilized in conjunction with GnuTLS. A use-after-free is a memory corruption flaw where an application continues to use a point...
CVE-2026-94055: Use After Free
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-84975 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...
CVE-2026-84975 PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...
EulerOS Virtualization 2.11.0 : gnutls (EulerOS-SA-2026-3506)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decodi...
CVE-2026-84975: Improper Certificate Validation
PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/sslsockossl.c and pjlib/src/pj/sslsockgtls.c copy DNS SubjectAltName values with string functions that recalculate their length and truncate an...
EulerOS Virtualization 2.11.1 : gnutls (EulerOS-SA-2026-3419)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decodi...
EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2026-3691)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...
EulerOS 2.0 SP15 : gnutls (EulerOS-SA-2026-3780)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...
EulerOS 2.0 SP15 : glib-networking (EulerOS-SA-2026-3779)
According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...
EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2026-3641)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...
EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2026-3738)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...
EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2026-3587)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...
EulerOS 2.0 SP15 : glib-networking (EulerOS-SA-2026-3804)
According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...
EulerOS 2.0 SP15 : gnutls (EulerOS-SA-2026-3805)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...