Threats tagged 'ghsa-45p2-c2m2-2656'

An off-by-one error in the PKCS#12 bag element bounds check in gnutls allows a remote attacker to write past the internal array when appending to a bag with 32 elements. This memory corruption can cause a denial of service (DoS) or potentially other unspecified impacts. The vulnerability is tracked as CVE-2026-42015 with a CVSS score of 5.3 (medium severity). Red Hat has released security updates addressing this issue in their Extended Life Cycle Support 7 packages.