CVE-2026-33845

EUVD-2026-26392
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Wrap or Wraparound
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
gnugnutls
-
redhatopenshift_container_platform
4.0
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:3.8.10-4.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:3.8.9-9.el10_0.19 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
0:3.3.29-9.el7_9.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
0:3.6.16-8.el8_10.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:3.6.14-10.el8_4.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
0:4.13-3.el8_4.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:3.6.14-10.el8_4.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
0:4.13-3.el8_4.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:3.6.16-5.el8_6.5 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
0:4.13-3.el8_6.2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
0:3.6.16-5.el8_6.5 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
0:4.13-3.el8_6.2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:3.6.16-7.el8_8.4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
0:4.13-4.el8_8.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:3.6.16-7.el8_8.4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
0:4.13-4.el8_8.1 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:3.8.10-4.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
0:3.8.3-4.el9_4.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:3.8.3-6.el9_6.4 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1782951051 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1782951012 ≤
𝑥
< *
ADP
Red HatRed Hat AI Inference Server 3.2
1782951244 ≤
𝑥
< *
ADP
Red HatRed Hat Discovery 2
1782159791 ≤
𝑥
< *
ADP
Red HatRed Hat Discovery 2
1782166952 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
3.8.13-1.hum1 ≤
𝑥
< *
ADP
Red HatRed Hat Update Infrastructure 5
1781525684 ≤
𝑥
< *
ADP
Red HatRed Hat Update Infrastructure 5
1781525671 ≤
𝑥
< *
ADP
Red HatRed Hat Update Infrastructure 5
1781525693 ≤
𝑥
< *
ADP
Red HatRed Hat Update Infrastructure 5
1781525739 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
gnutls28
bookworm
3.7.9-2+deb12u7
fixed
bookworm (security)
3.7.9-2+deb12u7
fixed
bullseye
vulnerable
bullseye (security)
3.7.1-5+deb11u10
fixed
forky
3.8.13-1
fixed
sid
3.8.13-1
fixed
trixie
3.8.9-3+deb13u4
fixed
trixie (security)
3.8.9-3+deb13u4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gnutls28
bionic
not-affected
focal
Fixed 3.6.13-2ubuntu1.12+esm2
released
jammy
Fixed 3.7.3-4ubuntu1.9
released
noble
Fixed 3.8.3-1.1ubuntu3.6
released
questing
Fixed 3.8.9-3ubuntu2.2
released
resolute
Fixed 3.8.12-2ubuntu1.1
released
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
gnutls
suse enterprise desktop 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise server 12 SP3
3.3.27-3.18.1
fixed
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.20.1
fixed
gnutls-guile
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
libgnutls-devel
suse enterprise desktop 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.20.1
fixed
libgnutls-openssl-devel
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
libgnutls-openssl27
suse enterprise server 12 SP3
3.3.27-3.18.1
fixed
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
libgnutls28
suse enterprise server 12 SP3
3.3.27-3.18.1
fixed
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
libgnutls28-32bit
suse enterprise server 12 SP3
3.3.27-3.18.1
fixed
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
libgnutls30
suse enterprise desktop 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise server 12 SP5
3.4.17-8.23.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.20.1
fixed
libgnutls30-32bit
suse enterprise desktop 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise server 12 SP5
3.4.17-8.23.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.20.1
fixed
libgnutls30-hmac
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
libgnutls30-hmac-32bit
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
libgnutlsxx-devel
suse enterprise desktop 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise server 12 SP5
3.3.27-3.18.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.20.1
fixed
libgnutlsxx28
suse enterprise server 15 SP4
3.7.3-150400.4.59.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.59.1
fixed
libgnutlsxx30
suse enterprise desktop 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.20.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.20.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gnutls
RHEL 8
0:3.6.16-8.el8_10.6
fixed
RHEL 8.4 AUS
0:3.6.14-10.el8_4.1
fixed
RHEL 8.6 AUS
0:3.6.16-5.el8_6.5
fixed
RHEL 8.8 E4S
0:3.6.16-7.el8_8.4
fixed
RHEL 8.8 TUS
0:3.6.16-7.el8_8.4
fixed
RHEL 9
0:3.8.10-4.el9_8
fixed
gnutls-c
RHEL 8
0:3.6.16-8.el8_10.6
fixed
RHEL 8.4 AUS
0:3.6.14-10.el8_4.1
fixed
RHEL 8.6 AUS
0:3.6.16-5.el8_6.5
fixed
RHEL 8.8 E4S
0:3.6.16-7.el8_8.4
fixed
RHEL 8.8 TUS
0:3.6.16-7.el8_8.4
fixed
RHEL 9
0:3.8.10-4.el9_8
fixed
gnutls-dane
RHEL 8
0:3.6.16-8.el8_10.6
fixed
RHEL 8.4 AUS
0:3.6.14-10.el8_4.1
fixed
RHEL 8.6 AUS
0:3.6.16-5.el8_6.5
fixed
RHEL 8.8 E4S
0:3.6.16-7.el8_8.4
fixed
RHEL 8.8 TUS
0:3.6.16-7.el8_8.4
fixed
RHEL 9
0:3.8.10-4.el9_8
fixed
gnutls-devel
RHEL 8
0:3.6.16-8.el8_10.6
fixed
RHEL 8.4 AUS
0:3.6.14-10.el8_4.1
fixed
RHEL 8.6 AUS
0:3.6.16-5.el8_6.5
fixed
RHEL 8.8 E4S
0:3.6.16-7.el8_8.4
fixed
RHEL 8.8 TUS
0:3.6.16-7.el8_8.4
fixed
RHEL 9
0:3.8.10-4.el9_8
fixed
gnutls-utils
RHEL 8
0:3.6.16-8.el8_10.6
fixed
RHEL 8.4 AUS
0:3.6.14-10.el8_4.1
fixed
RHEL 8.6 AUS
0:3.6.16-5.el8_6.5
fixed
RHEL 8.8 E4S
0:3.6.16-7.el8_8.4
fixed
RHEL 8.8 TUS
0:3.6.16-7.el8_8.4
fixed
RHEL 9
0:3.8.10-4.el9_8
fixed
libtasn1
RHEL 8.4 AUS
0:4.13-3.el8_4.1
fixed
RHEL 8.6 AUS
0:4.13-3.el8_6.2
fixed
RHEL 8.8 E4S
0:4.13-4.el8_8.1
fixed
RHEL 8.8 TUS
0:4.13-4.el8_8.1
fixed
libtasn1-devel
RHEL 8.4 AUS
0:4.13-3.el8_4.1
fixed
RHEL 8.6 AUS
0:4.13-3.el8_6.2
fixed
RHEL 8.8 E4S
0:4.13-4.el8_8.1
fixed
RHEL 8.8 TUS
0:4.13-4.el8_8.1
fixed
libtasn1-tools
RHEL 8.4 AUS
0:4.13-3.el8_4.1
fixed
RHEL 8.6 AUS
0:4.13-3.el8_6.2
fixed
RHEL 8.8 E4S
0:4.13-4.el8_8.1
fixed
RHEL 8.8 TUS
0:4.13-4.el8_8.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
gnutls
Amazon Linux 2
0:3.3.29-9.amzn2.0.4
fixed
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-c++
Amazon Linux 2
0:3.3.29-9.amzn2.0.4
fixed
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-c++-debuginfo
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-dane
Amazon Linux 2
0:3.3.29-9.amzn2.0.4
fixed
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-dane-debuginfo
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-debuginfo
Amazon Linux 2
0:3.3.29-9.amzn2.0.4
fixed
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-debugsource
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-devel
Amazon Linux 2
0:3.3.29-9.amzn2.0.4
fixed
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-utils
Amazon Linux 2
0:3.3.29-9.amzn2.0.4
fixed
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
gnutls-utils-debuginfo
Amazon Linux 2023
0:3.8.3-8.amzn2023.0.4
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
gnutls
Azure Linux 3.0
0:3.8.3-9.azl3
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2026:13274
https://access.redhat.com/errata/RHSA-2026:20611
https://access.redhat.com/errata/RHSA-2026:20612
https://access.redhat.com/errata/RHSA-2026:20613
https://access.redhat.com/errata/RHSA-2026:26319
https://access.redhat.com/errata/RHSA-2026:26409
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30004
https://access.redhat.com/errata/RHSA-2026:30849
https://access.redhat.com/errata/RHSA-2026:30850
https://access.redhat.com/errata/RHSA-2026:32962
https://access.redhat.com/errata/RHSA-2026:33125
https://access.redhat.com/errata/RHSA-2026:34372
https://access.redhat.com/errata/RHSA-2026:36004
https://access.redhat.com/errata/RHSA-2026:36005
https://access.redhat.com/errata/RHSA-2026:36006
https://access.redhat.com/errata/RHSA-2026:41921
https://access.redhat.com/security/cve/CVE-2026-33845
https://bugzilla.redhat.com/show_bug.cgi?id=2450624
https://access.redhat.com/errata/RHSA-2026:13274
https://access.redhat.com/errata/RHSA-2026:20611
https://access.redhat.com/errata/RHSA-2026:20612
https://access.redhat.com/errata/RHSA-2026:20613
https://access.redhat.com/errata/RHSA-2026:26319
https://access.redhat.com/errata/RHSA-2026:26409
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30004
https://access.redhat.com/errata/RHSA-2026:30849
https://access.redhat.com/errata/RHSA-2026:30850
https://access.redhat.com/errata/RHSA-2026:32962
https://access.redhat.com/errata/RHSA-2026:33125
https://access.redhat.com/errata/RHSA-2026:34372
https://access.redhat.com/errata/RHSA-2026:36004
https://access.redhat.com/errata/RHSA-2026:36005
https://access.redhat.com/errata/RHSA-2026:36006
https://access.redhat.com/errata/RHSA-2026:41921
https://access.redhat.com/security/cve/CVE-2026-33845
https://bugzilla.redhat.com/show_bug.cgi?id=2450624
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json