Threats tagged 'ghsa-2pw7-g86g-76q7'

CVE-2026-42013 is a vulnerability in the GnuTLS library where an oversized Subject Alternative Name (SAN) in a certificate causes the validation process to incorrectly fall back to checking the Common Name (CN) field. This flaw can allow remote attackers to bypass proper certificate validation, potentially enabling spoofing or man-in-the-middle attacks. The issue affects certain versions of GnuTLS in Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat has released an official security update that addresses this vulnerability.