EUVD-2026-83613

Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free...

CVE-2026-94055

CVE-2026-94055 affects Exim prior to version 4.100.1 and involves a use-after-free vulnerability that is triggered when certain non-default TLS settings are used in conjunction with GnuTLS . The attack vector is network-based with high complexity , requiring no privileges or user interaction. The...

POC_CVE-2026-45185

CVE-2026-45185 Laboratorio de Validación de Plantillas Nuclei Este repositorio no es un repositorio de PoC de exploits de propósito general. Es un laboratorio de validación local para reproducir y revisar el comportamiento de una plantilla CVE-2026-45185 destinada a ser contribuida a...

CVE-2014-3466_PoC

Prueba de concepto para CVE-2014-3466 desbordamiento de búfer en GnuTLS: comprobación de longitud del id de sesión Información Ver: https://bugzilla.redhat.com/showbug.cgi?id=1101932 Esto no es un exploit armado. Aviso: este código Python es feo, básicamente construí el ServerHello a mano y solo...

ciphertest

cipherTest.sh por Patrick Bogen cipherTest.sh es un "mejor" comprobador de cifrados SSL en el sentido de que utiliza gnutls, que tiene soporte para muchas más configuraciones que openssl. Prueba potencialmente 3,200 configuraciones diferentes pero realiza una pre-optimización para minimizar las...

cryptodev-linux

cryptodev-linux Este es un controlador de dispositivo /dev/crypto, equivalente a los de OpenBSD o FreeBSD. La idea principal es acceder a los cifrados existentes en el espacio del kernel desde el espacio de usuario, permitiendo así la reutilización de una implementación de hardware de un cifrado...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim Heap UAF to Remote Root CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS builds | Unauthenticated Full write-up with GDB trace, step-by-step analysis, and global exposure data: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html What is it...

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2026-3691)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

EulerOS 2.0 SP15 : gnutls (EulerOS-SA-2026-3780)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

EulerOS 2.0 SP15 : glib-networking (EulerOS-SA-2026-3779)

According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...

EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2026-3641)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that...

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2026-3738)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

EulerOS 2.0 SP15 : glib-networking (EulerOS-SA-2026-3804)

According to the versions of the glib-networking package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in glib-networking. A remote attacker can exploit this vulnerability by presenting a specially crafted certificate chain ...

EulerOS 2.0 SP15 : gnutls (EulerOS-SA-2026-3805)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform...

cve-2020-13777

Zeek тестовый скрипт для CVE-2020-13777 Этот скрипт выполняет простой тест для проверки, потенциально ли уязвим сервер к CVE-2020-13777. CVE-2020-13777 заставляет GnuTLS создавать незашифрованные сессионные билеты. Это, по-видимому, можно обнаружить, проверив, устанавливает ли gnutls keyname в но...

PoC_TLS1_3_CVE-2020-13777

PoC TLS1.3 CVE-2020-13777 Propósito de este PoC Este PoC y el artículo relacionado fueron creados para postular al proyecto "Challenge CVE-2020-13777". CVE-2020-13777 es una vulnerabilidad de GnuTLS cuyo parche está ampliamente distribuido. Este PoC tiene como objetivo contribuir a mejorar la...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.73 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.73 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Astra Linux – Vulnerability in gnutls28

A flaw in GnuTLS’ DTLS handshake parsing allows for malformed fragments with zero length and non-zero offsets. This leads to an integer underflow during reassembly, resulting in an out-of-bounds read. This issue is remotely exploitable and could cause information disclosure or denial of service...

Astra Linux – Vulnerability in gnutls28

There is a heap buffer overflow vulnerability in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in the mergehandshakepacket function, where incoming handshake fragments are matched and merged solely based on the handshake type, without verifying that the messagelength...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a speciall...