According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service.(CVE-2026-42009)

    A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security     Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change     the PIN with a NULL old PIN for a token that lacks a protected authentication path.(CVE-2026-42014)

    A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest-Shamir-Adleman - Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication     process.(CVE-2026-42010)

    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.(CVE-2026-33846)

    A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service.(CVE-2026-33845)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote host is prior to 3.8.13. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-122-02 advisory.

    New gnutls packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the gnutls security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0816 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2026-33845:
    A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service.

    CVE-2026-33846:
    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.

    CVE-2026-42009:
    A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure.(CVE-2026-3833)

    A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative     Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS     hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or     intercept sensitive information.(CVE-2026-42012)

    A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service.(CVE-2026-42009)

    A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security     Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change     the PIN with a NULL old PIN for a token that lacks a protected authentication path.(CVE-2026-42014)

    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.(CVE-2026-33846)

    A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service.(CVE-2026-33845)

    A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN)     could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This     could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or     man-in-the-middle attacks.(CVE-2026-42013)

    A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an     RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap     overread. This memory corruption vulnerability could lead to information disclosure.(CVE-2026-5260)

    A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest-Shamir-Adleman - Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication     process.(CVE-2026-42010)

    A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This     vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending     to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS)     or potentially other unspecified impacts.(CVE-2026-42015)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20613 advisory.

    - Fix CVE-2026-33846
    - Fix CVE-2026-42009
    - Fix CVE-2026-33845
    - Fix CVE-2026-42010
    - Fix CVE-2026-3833
    - Fix CVE-2026-42011
    - Fix CVE-2026-42012
    - Fix CVE-2026-42013
    - Fix CVE-2026-42014
    - Fix CVE-2026-5260
    - Fix CVE-2026-42015
    - Fix CVE-2026-3832
    - Fix CVE-2026-5419

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8502-1 advisory.

    It was discovered that GnuTLS had a timing side-channel when processing malformed ciphertexts in RSA-PSK     ClientKeyExchange. A remote attacker could possibly use this issue to recover sensitive information. This     issue only affected Ubuntu 18.04 LTS. (CVE-2024-0553)

    Bing Shi discovered that GnuTLS incorrectly handled decoding certain DER-encoded certificates. A remote     attacker could possibly use this issue to cause GnuTLS to consume resources, leading to a denial of     service. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-12243)

    Luigino Camastra discovered that GnuTLS incorrectly handled certain PKCS11 token labels. A remote attacker     could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute     arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a     denial of service. (CVE-2025-9820)

    Tim Scheckenbach discovered that GnuTLS incorrectly handled malicious certificates containing a large     number of name constraints and subject alternative names. A remote attacker could possibly use this issue     to cause GnuTLS to consume resources, resulting in a denial of service. This issue only affected Ubuntu     18.04 LTS and Ubuntu 20.04 LTS. (CVE-2025-14831)

    Oleh Konko and Joshua Rogers discovered that GnuTLS did not properly handle case-insensitive name     constraints in certain cases. A remote attacker could possibly use this issue to bypass certificate     validation, leading to a machine-in-the-middle attack. (CVE-2026-3833)

    Joshua Rogers discovered that GnuTLS did not properly handle very short premaster secrets in certain RSA     key exchange cases with PKCS#11-backed server keys. A remote attacker could possibly use this issue to     obtain sensitive information. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
    (CVE-2026-5260)

    Joshua Rogers discovered that GnuTLS did not properly handle malformed DTLS handshake fragments in certain     cases. A remote attacker could possibly use this issue to obtain sensitive information, or cause a denial     of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-33845)

    Haruto Kimura, Oscar Reparaz, and Zou Dikai discovered that GnuTLS did not properly validate DTLS     handshake fragment lengths in certain cases. A remote attacker could possibly use this issue to cause     GnuTLS to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-33846)

    Joshua Rogers discovered that GnuTLS did not properly order DTLS packets with duplicate sequence numbers     in certain cases. A remote attacker could possibly use this issue to cause GnuTLS to crash, resulting in a     denial of service. (CVE-2026-42009)

    Joshua Rogers discovered that GnuTLS did not properly handle usernames containing NUL characters in     certain RSA-PSK configurations. A remote attacker could possibly use this issue to bypass authentication     and gain unintended access to services. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-42010)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1757 advisory.

    GnuTLS didn't check that DTLS fragments claimed a consistent message_length value. Additionally, a crucial     array size check was missing, enabling an attacker to cause a heap overwrite. (CVE-2026-33846)

    A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure. (CVE-2026-3833)

    The comparator function used for ordering DTLS packets by sequence numbers did not follow qsort comparator     contracts in case of packets with duplicate sequence numbers, which could lead to undefined behaviour.
    (CVE-2026-42009)

    Servers configured with RSA-PSK wrongfully matched usernames with NUL character in them to ones truncated     to NUL character, which could lead to an authentication bypass. (CVE-2026-42010)

    Changing the Security Officer PIN with gnutls_pkcs11_token_set_pin() with oldpin == NULL for a token     lacking a protected authentication path led to a use-after-free. (CVE-2026-42014)

    Appending to a PKCS#12 bag that already contained 32 elements could write past the bag's internal array.
    (CVE-2026-42015)

    For a server using an RSA key backed by a PKCS#11 token, a client sending an extremely short premaster     secret during an RSA key exchange could trigger a short heap overread. (CVE-2026-5260)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0305 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2026-33846:
    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:26409 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP     response (CVE-2026-3832)

    * gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison (CVE-2026-3833)

    * gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment (CVE-2026-33845)

    * gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly     (CVE-2026-33846)

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)

    * gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)

    * gnutls: gnutls: Security bypass due to incorrect name constraint handling (CVE-2026-42011)

    * gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs     (CVE-2026-42012)

    * gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name (CVE-2026-42013)

    * gnutls: gnutls: Information disclosure via heap overread in RSA key exchange (CVE-2026-5260)

    * gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin (CVE-2026-42014)

    * gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling (CVE-2026-42015)

    * guntls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal (CVE-2026-5419)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2087-1 advisory.

    This update for gnutls fixes the following issues

    - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
    - CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
    - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
    - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
    - CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
    - CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
    - CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
    - CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
    - CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
    - CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
    - CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 11.2.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2.0.2 advisory.

  - A flaw was found in gnutls. Servers configured with RSA-PSK (RivestShamirAdleman  Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
    (CVE-2026-42010)

  - Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send     contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer     might contain sensitive data from the previous execution of the application process which leads to     sensitive data leakage to an attacker. RSA_public_encrypt() returns the number of bytes written on success     and -1 on error. The affected code tests only whether the return value is non-zero. As a result, if RSA     encryption fails, encapsulation can still return success to the caller, set the output lengths, and leave     the caller to use the contents of the ciphertext buffer as if a valid KEM ciphertext had been produced. If     applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an attacker-supplied invalid RSA public key     without first validating that key, then this may cause stale or uninitialized contents of the caller-     provided ciphertext buffer to be disclosed to the attacker in place of the KEM ciphertext. As a workaround     calling EVP_PKEY_public_check() or EVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will     mitigate the issue. The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue.
    (CVE-2026-31790)

  - Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version     2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in     a one byte heap buffer overflow. (CVE-2026-5450)

  - An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error     messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.
    (CVE-2024-34459)

  - A use-after-free vulnerability was found in libxslt while parsing xsl nodes that may lead to the     dereference of expired pointers and application crash. (CVE-2025-10911)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
328607	EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-2851)	Nessus	Huawei Local Security Checks	2026/7/21	2026/7/21	critical
328655	EulerOS Virtualization 2.10.1 : gnutls (EulerOS-SA-2026-2820)	Nessus	Huawei Local Security Checks	2026/7/21	2026/7/21	critical
311803	Slackware Linux 15.0 / current gnutls Vulnerability (SSA:2026-122-02)	Nessus	Slackware Local Security Checks	2026/5/3	2026/5/3	high
333142	TencentOS Server 2: gnutls (TSSA-2026:0816)	Nessus	Tencent Local Security Checks	2026/8/6	2026/8/6	critical
333393	EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2026-3067)	Nessus	Huawei Local Security Checks	2026/8/8	2026/8/8	critical
328761	Oracle Linux 10 : gnutls (ELSA-2026-20613)	Nessus	Oracle Linux Local Security Checks	2026/7/21	2026/7/21	critical
325430	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : GnuTLS vulnerabilities (USN-8502-1)	Nessus	Ubuntu Local Security Checks	2026/7/7	2026/7/7	critical
316839	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2026-1757)	Nessus	Amazon Linux Local Security Checks	2026/5/26	2026/5/27	critical
319757	TencentOS Server 4: gnutls (TSSA-2026:0305)	Nessus	Tencent Local Security Checks	2026/6/8	2026/6/8	high
321270	RHEL 10 : gnutls (RHSA-2026:26409)	Nessus	Red Hat Local Security Checks	2026/6/16	2026/6/16	critical
317655	SUSE SLES15 Security Update : gnutls (SUSE-SU-2026:2087-1)	Nessus	SuSE Local Security Checks	2026/5/29	2026/5/29	critical
341615	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2.0.2)	Nessus	Misc.	2026/8/31	2026/8/31	high

检测

插件搜索

critical

critical

high

critical

critical

critical

critical

critical

high

critical

critical

high