CVE-2026-33845
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Ver en NVDAnálisis
GnuTLS has a flaw in its DTLS handshake parsing that allows remote attackers to trigger an integer underflow. This can lead to a denial of service or information disclosure when processing malformed fragments. Users of Red Hat Enterprise Linux and OpenShift should ensure their core crypto libraries are updated.
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCWE-191EPSS
Afecta
gnu:gnutlsredhat:openshift_container_platformredhat:enterprise_linuxDescripción técnica
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.