5362 matches found
UBUNTU-CVE-2026-67693
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...
PoC_TLS1_3_CVE-2020-13777
PoC TLS1.3 CVE-2020-13777 The purpose of this PoC This PoC and related article were created to apply for the project "Challenge CVE-2020-13777". CVE-2020-13777 is a GnuTLS vulnerability whose patch is widely distributed. This PoC aims to contribute to improving the information security literacy o...
Dead.Letter-CVE-2026-45185
CVE-2026-45185 — "Dead.Letter" Exim Vulnerability Scanner A shell script for detecting whether a Linux system is vulnerable to CVE-2026-45185, a use-after-free in the Exim mail transfer agent that can lead to remote code execution. Designed for use in CI/CD pipelines, configuration management...
GnuTLS check_for_unknown_exts MITM DoS
The vulnerability of the checkforunknownexts function in the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to perform a MITM attack or cause service denial...
CentOS Linux 7 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (CENTOS7:CLSA-2026:1791496727)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1791496727 advisory. - A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate...
curl: CVE-2026-107928: info leak uploading over WebSockets with GnuTLS
Summary: When curl is built with GnuTLS, a malicious WebSocket server can make curl -T wss://... send memory past curl's WebSocket send buffer. This is due to an out of bounds read in gtlssend, which doesn't handle if gnutlsrecordsend returns a number of bytes sent greater than the number of byte...
Linux Distros Unpatched Vulnerability : CVE-2026-67693
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end- entity X.509 certificates that contain a contradictory...
Linux Distros Unpatched Vulnerability : CVE-2026-88648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and...
Linux Distros Unpatched Vulnerability : CVE-2026-95184
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
Linux Distros Unpatched Vulnerability : CVE-2026-95210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. CVE-2026-95210 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2026-88647
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-95209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS. CVE-2026-95209 Note that Nessus relies on the...
CVE-2026-67693
A flaw was found in GnuTLS. The certificate verification process fails to properly reject end-entity digital certificates containing contradictory Key Usage KU and Extended Key Usage EKU extensions, which define the permitted cryptographic operations of a certificate. A remote attacker could...
CVE-2026-88648
A flaw was found in GnuTLS. An attacker controlling a subordinate Certificate Authority CA can exploit an incomplete X.509 certificate validation mechanism to bypass cross-domain Public Key Infrastructure PKI restrictions. This allows unauthorized certificates to be accepted as valid, potentially...
CVE-2026-88647
A flaw was found in GnuTLS. This vulnerability can lead to information disclosure by allowing an attacker to bypass certificate hostname verification. A remote attacker presenting a crafted certificate can circumvent the Common Name fallback check, enabling them to eavesdrop on or intercept...
AZL-107439 CVE-2026-95209 affecting package gnutls 3.8.13-1
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...
DEBIAN-CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
AZL-107436 CVE-2026-88648 affecting package gnutls 3.8.13-1
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
