5362 matches found
CVE-2026-95209
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, resulting in a Denial of Service (DoS) . The provided documents do not specify the underlying root cause, specific component details, or available remediation steps. Exploitation details are not provided.
CVE-2026-95184
The software gnutls version v3.8.13 is affected by an improper certificate validation vulnerability. This flaw causes the application to incorrectly reject legitimate certificates from valid users, resulting in a Denial of Service (DoS) . No specific remediation, exploit information, or exploit l...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
EUVD-2026-95204
An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service DoS...
EUVD-2026-95205
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
CVE-2026-88648: Undefined Security Weakness
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
CVE-2026-67693: Time-of-check Time-of-use (TOCTOU) Race Condition
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...
CVE-2026-95210: Improper Certificate Validation
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
CVE-2026-95184: Uncontrolled Resource Consumption
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-88647: Improper Validation of Certificate with Host Mismatch
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
EUVD-2026-95139
Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions...
EUVD-2026-95140
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-67693
A flaw exists in gnutls v.3.8.13 where the certificate verification process fails to properly reject end-entity X.509 certificates containing contradictory combinations of Key Usage (KU) and Extended Key Usage (EKU) extensions. These extensions define the permitted cryptographic operations of a c...
CVE-2026-67693
An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key Usage KU and Extended Key Usage EKU...
CVE-2026-88648
Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates...
CVE-2026-88647
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...
CVE-2026-95184
Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service DoS...
CVE-2026-95210
The gnutls library in version v3.8.13 is vulnerable to improper certificate validation . This flaw allows the application to accept certificates that contain invalid extensions , potentially compromising the integrity of the TLS connection. While the provided documents do not specify a direct rem...