The vulnerability CVE-2026-33845 exists in the GnuTLS DTLS handshake parsing code, where malformed fragments with zero length and non-zero offset cause an integer underflow during reassembly. This underflow leads to an out-of-bounds read condition. The issue is remotely exploitable without authentication and can cause denial of service or information disclosure. Red Hat has released security updates for GnuTLS in Red Hat Enterprise Linux 7 Extended Lifecycle Support to fix this vulnerability, as detailed in advisory RHSA-2026:34372.

Successful exploitation of this vulnerability can cause denial of service by crashing the affected service or potentially lead to information disclosure due to out-of-bounds memory reads. The CVSS v3.1 base score is 7.5 (high severity), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Red Hat has released an official security update for GnuTLS in Red Hat Enterprise Linux 7 Extended Lifecycle Support to address CVE-2026-33845. Users should apply the update as described in Red Hat advisory RHSA-2026:34372 and the referenced article https://access.redhat.com/articles/11258. No additional mitigations are required beyond applying the official patch.