5095 matches found
K000163397: GnuTLS vulnerability CVE-2026-42015
Security Advisory Description A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory...
CVE-2026-94055
A flaw was found in Exim. When certain non-default TLS Transport Layer Security settings are used with GnuTLS, a use-after-free vulnerability exists. This flaw could allow a remote attacker to trigger a system crash, leading to a denial of service. Mitigation Disable the non-default...
CVE-2026-84975
A flaw was found in PJSIP, a multimedia communication library, specifically within its OpenSSL and GnuTLS Transport Layer Security TLS backends. This vulnerability allows a remote attacker to bypass server identity verification by using a specially crafted TLS certificate containing an embedded...
SUSE CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2026-090116)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090116 advisory. GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2025-002258)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002258 advisory. A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutlspkcs7verify...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2022-001364)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001364 advisory. A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2024-005631)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005631 advisory. An issue was discovered in GnuTLS before 3.6.15. A server can trigger a NULL pointer dereference in a TLS 1.3 client if a norenegotiation alert is sent with unexpect...
K000163346: GnuTLS vulnerability CVE-2026-3833
Security Advisory Description A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically for dNSName DNS or rfc822Name email constraints within excludedSubtrees or permittedSubtrees. A remote attacker can exploi...
K000163347: GnuTLS vulnerability CVE-2026-33845
Security Advisory Description A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure ...
K000163345: GnuTLS vulnerability CVE-2026-3832
Security Advisory Description A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a clien...
K000163349: Gnutls vulnerability CVE-2026-5419
Security Advisory Description A flaw was found in gnutls. The PKCS7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker to potentially leak sensitive information about the padding bytes through observable timing differences. Th...
EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-3833)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...
EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-3868)
According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in Apache HTTP Server up to 2.4.67 Web Server and classified as critical.Using CWE to declare the problem...
EUVD-2026-83613
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
Linux Distros Unpatched Vulnerability : CVE-2026-94055
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. CVE-2026-94055 Note that Nessus relies on the presence of...
DEBIAN-CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
CVE-2026-94055
Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...
