A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-dane | Mar 16, 2026 | Mar 10, 2026 |
| Alpine Linux | — | Upgrade gnutls | Feb 24, 2026 | Feb 9, 2026 |
| Amazon_linux_2023 | — | Upgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutls-devel | Apr 7, 2026 | Feb 9, 2026 |
| Debian | — | Upgrade gnutls28 | Feb 19, 2026 | Feb 19, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade gnutls-fipsUpgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls | Mar 3, 2026 | Feb 9, 2026 |
| Redhat_linux | — | Upgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-fipsNo solution existsUpgrade gnutls | Mar 3, 2026 | Feb 9, 2026 |
| Rocky_linux | — | Upgrade gnutls-develUpgrade gnutls-debugsourceUpgrade gnutls-debuginfoUpgrade gnutls-c++Upgrade gnutls-fipsUpgrade gnutls-utils-debuginfoUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutls-dane-debuginfo | Mar 9, 2026 | Mar 5, 2026 |
| Ubuntu | — | Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls30t64Upgrade libgnutls-dane0 (Ubuntu Pro)Upgrade libgnutlsxx28 (Ubuntu Pro)Upgrade gnutls-bin (Ubuntu Pro)Upgrade libgnutls28-dev (Ubuntu Pro)Upgrade guile-gnutls (Ubuntu Pro)Upgrade libgnutls30Upgrade libgnutls-openssl27 (Ubuntu Pro) | Feb 17, 2026 | Feb 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub