Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall ba...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. A use-after-free issue in clientsendparams in lib/ext/presharedkey.c may lead to memory corruption and other potential problems...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. There is an “off-by-one” error in the bounds check for the PKCS12 bag element. This vulnerability allows a remote attacker to write beyond the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could le...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in libgnutls. A remote attacker could trigger a short heap overread by sending an extremely short premaster secret during an RSA key exchange to a server that uses an RSA key backed by a PKCS11 token. This memory corruption vulnerability could lead to information disclosure...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. A remote attacker could exploit a issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. Thi...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. This vulnerability arises due to the incorrect ignoring of permitted name constraints when previous Certificate Authorities only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate...

Astra Linux – Vulnerability in gnutls28

A flaw was discovered in gnutls. Servers configured with RSA-PSK Rivest–Shamir–Adleman – Pre-Shared Key incorrectly matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, resulting in an authentication...

Debian dla-4595 : gnutls-bin - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4595 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4595-1 [email protected]...

ROOT-OS-DEBIAN-13-CVE-2026-33845 CVE-2026-33845 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-33845 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-33846 CVE-2026-33846 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-33846 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-42011 CVE-2026-42011 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-42011 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-3833 CVE-2026-3833 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-3833 in the rootio-gnutls28 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-42010 CVE-2026-42010 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-42010 in the rootio-gnutls28 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-33846 CVE-2026-33846 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-33846 in the rootio-gnutls28 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-33845 CVE-2026-33845 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2026-33845 in the rootio-gnutls28 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-9820 CVE-2025-9820 in rootio-gnutls28 - Patched by Root

Root has patched CVE-2025-9820 in the rootio-gnutls28 package for Root:Debian:12. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-42015

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the...

Linux Distros Unpatched Vulnerability : CVE-2026-5260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed ...

Linux Distros Unpatched Vulnerability : CVE-2026-33845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and...

Linux Distros Unpatched Vulnerability : CVE-2026-5419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gnutls. The PKCS7 padding check, performed during decryption, was not constant-time. This timing side-channel could allow a remote attacker ...