Riskcovery

CVE-2026-33845

Gnutls: gnutls: denial of service via dtls zero-length fragment

State
Published
Severity
7.5 High
Published
Apr 30, 2026
Updated
Oct 14, 2026
Reserved
Mar 24, 2026

Read the record on cve.org

Description

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hredhat
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hredhat-SADP

Weaknesses

  • CWE-191 Integer Underflow (Wrap or Wraparound)

Affected Products

ProductVersions
gnutls
  • before 3.8.13Affected
Red Hat Enterprise Linux 10Red Hat
  • 0:3.8.10-4.el10_2 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat
  • 0:3.8.9-9.el10_0.19 and laterNot affected
Red Hat Enterprise Linux 7 Extended Lifecycle SupportRed Hat
  • 0:3.3.29-9.el7_9.1 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:3.6.16-8.el8_10.6 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:3.6.16-8.el8_10.6 and laterNot affected
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat
  • 0:3.6.14-10.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRed Hat
  • 0:4.13-3.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat
  • 0:3.6.14-10.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRed Hat
  • 0:4.13-3.el8_4.1 and laterNot affected
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat
  • 0:3.6.16-5.el8_6.5 and laterNot affected
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRed Hat
  • 0:4.13-3.el8_6.2 and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRed Hat
  • 0:3.6.16-5.el8_6.5 and laterNot affected
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRed Hat
  • 0:4.13-3.el8_6.2 and laterNot affected
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat
  • 0:3.6.16-7.el8_8.4 and laterNot affected
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRed Hat
  • 0:4.13-4.el8_8.1 and laterNot affected
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat
  • 0:3.6.16-7.el8_8.4 and laterNot affected
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRed Hat
  • 0:4.13-4.el8_8.1 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:3.8.10-4.el9_8 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:3.8.10-4.el9_8 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat
  • 0:3.7.6-21.el9_2.7 and laterNot affected
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat
  • 0:3.8.3-4.el9_4.6 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat
  • 0:3.8.3-6.el9_6.4 and laterNot affected
Red Hat OpenShift Container Platform 4.12Red Hat
  • 412.86.202608241157-0 and laterNot affected
Red Hat OpenShift Container Platform 4.13Red Hat
  • 413.92.202609080414-0 and laterNot affected
Red Hat OpenShift Container Platform 4.14Red Hat
  • 414.92.202608172040-0 and laterNot affected
Red Hat OpenShift Container Platform 4.15Red Hat
  • 415.92.202608180329-0 and laterNot affected
Red Hat OpenShift Container Platform 4.16Red Hat
  • 416.94.202608150307-0 and laterNot affected
Red Hat OpenShift Container Platform 4.17Red Hat
  • 417.94.202608250221-0 and laterNot affected
Red Hat OpenShift Container Platform 4.18Red Hat
  • 418.94.202608142238-0 and laterNot affected
Red Hat OpenShift Container Platform 4.19Red Hat
  • 4.19.9.6.202608182320-0 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat
  • 1791371080 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat
  • 1791371069 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat
  • 1791788287 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.17Red Hat
  • 1791970484 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat
  • 1791459707 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat
  • 1791459711 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat
  • 1791459759 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat
  • 1789029076 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.18Red Hat
  • 1791966259 and laterNot affected
Cert Manager support for Red Hat OpenShift release 1.20Red Hat
  • 1790598593 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat
  • 1782951051 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat
  • 1782951012 and laterNot affected
Red Hat AI Inference Server 3.2Red Hat
  • 1782951244 and laterNot affected
Red Hat Discovery 2Red Hat
  • 1782159791 and laterNot affected
Red Hat Discovery 2Red Hat
  • 1782166952 and laterNot affected
Red Hat Hardened ImagesRed Hat
  • 3.8.13-1.hum1 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1790703542 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1781525684 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1781525671 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1781525693 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1781525739 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787241211 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787135742 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787241260 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
    Red Hat OpenShift Container Platform 4Red Hat

      References

      Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.