Threat Intelligence Database

A vulnerability in GnuTLS allows bypassing critical name constraint checks during certificate validation due to incorrect handling of permitted name constraints when previous CAs had only excluded name constraints. This flaw can lead to acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks. Red Hat has issued security updates addressing this and related certificate validation issues in GnuTLS for Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vulnerability is rated with high severity based on CVSS 3.1 metrics. The fix is available through official Red Hat advisories and updates.

A vulnerability in GnuTLS allows improper certificate validation when an oversized Subject Alternative Name (SAN) is present. The validation process may incorrectly fall back to checking the Common Name (CN) field, potentially enabling attackers to bypass proper certificate validation. This flaw could lead to spoofing or man-in-the-middle attacks. Red Hat has issued a security advisory with patches addressing this and related issues in GnuTLS for Red Hat Enterprise Linux 7 Extended Lifecycle Support. The vulnerability is rated as high severity based on CVSS 3.1 metrics. No known exploits are reported in the wild at this time.

A vulnerability in libgnutls allows a remote attacker to cause a short heap overread by sending an extremely short premaster secret during an RSA key exchange when the server uses an RSA key backed by a PKCS#11 token. This memory corruption issue can lead to information disclosure. The flaw is identified as CVE-2026-5260 and has been rated with high severity. Red Hat has released security updates addressing this and several other related vulnerabilities in the gnutls package for Red Hat Enterprise Linux 9.2. The update fixes the heap overread and other security issues, mitigating the risk of information disclosure and denial of service. Users of affected Red Hat Enterprise Linux versions are advised to apply the provided updates promptly.

A use-after-free vulnerability exists in the GnuTLS library within the gnutls_pkcs11_token_set_pin function, which is responsible for changing the Security Officer PIN. This flaw occurs when an attacker attempts to change the PIN with a NULL old PIN on a token lacking a protected authentication path. The vulnerability has been assigned CVE-2026-42014 and is rated as moderate severity. Red Hat has released a security update addressing this issue in their Extended Life Cycle Support 7 packages.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. This package update fixes a timing side-channel in deterministic ECDSA. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The gnutls package provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) * gnutls: potential crash during chain building/verification (CVE-2024-28835) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fix(es): * gnutls: potential crash during chain building/verification (CVE-2024-28835) * gnutls: vulnerable to Minerva side-channel information leak (CVE-2024-28834) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.