Skip to content
fr Sign in
3.7 Low

CVE-2026-3832 A flaw was found in gnutls

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Affected products and versions

Product Affected versions Fixed in
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat Hardened Images 3.8 earliest → < 3.8.13-1.hum1 3.8.13-1.hum1
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Update Infrastructure 5 1787241260 earliest → < 1787241260 1787241260
Show the 4 other branches
Product Affected versions Fixed in
Red Hat Discovery 2 1782166952 earliest → < 1782166952 1782166952
Cert Manager support for Red Hat OpenShift release 1.20 1790598593 earliest → < 1790598593 1790598593
Cert Manager support for Red Hat OpenShift release 1.17 1791970484 earliest → < 1791970484 1791970484
Cert Manager support for Red Hat OpenShift release 1.18 1791966259 earliest → < 1791966259 1791966259

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Enterprise Linux 10

The 1454 CVEs of Red Hat Enterprise Linux 10 →
CVE-2026-123151 Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail Not rated CVE-2026-121997 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch 8.1 High CVE-2026-121996 Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length 8.2 High CVE-2026-121995 Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tail 7.5 High
Track this CVE