A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls | Mar 16, 2026 | Mar 10, 2026 |
| Alpine Linux | — | Upgrade gnutls | Feb 24, 2026 | Feb 9, 2026 |
| Amazon_linux_2023 | — | Upgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-dane | Apr 7, 2026 | Feb 9, 2026 |
| Debian | — | Upgrade gnutls28 | Feb 19, 2026 | Feb 19, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Jun 2, 2026 |
| Oracle_linux | — | Upgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-fipsUpgrade gnutls-develUpgrade gnutls-dane | Mar 3, 2026 | Feb 9, 2026 |
| Redhat_linux | — | Upgrade gnutls-c++-debuginfoUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-fipsUpgrade gnutlsNo solution exists | Mar 3, 2026 | Feb 9, 2026 |
| Rocky_linux | — | Upgrade gnutls-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-debugsourceUpgrade gnutls-utilsUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-fipsUpgrade gnutlsUpgrade gnutls-dane-debuginfo | Mar 9, 2026 | Mar 5, 2026 |
| Ubuntu | — | Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls30t64Upgrade libgnutls-dane0 (Ubuntu Pro)Upgrade libgnutlsxx28 (Ubuntu Pro)Upgrade gnutls-bin (Ubuntu Pro)Upgrade libgnutls30Upgrade guile-gnutls (Ubuntu Pro)Upgrade libgnutls28-dev (Ubuntu Pro)Upgrade libgnutls-openssl27 (Ubuntu Pro) | Feb 17, 2026 | Feb 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub