According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure.(CVE-2026-3833)

    A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time.
    This timing side-channel could allow a remote attacker to potentially leak sensitive information about the     padding bytes through observable timing differences. This vulnerability is a form of information     disclosure.(CVE-2026-5419)

    A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in     how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly     accept a revoked server certificate, potentially leading to a compromise of trust.(CVE-2026-3832)

    A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN)     could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This     could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or     man-in-the-middle attacks.(CVE-2026-42013)

    A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an     RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap     overread. This memory corruption vulnerability could lead to information disclosure.(CVE-2026-5260)

    A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service.(CVE-2026-42009)

    A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service.(CVE-2026-33845)

    A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This     vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending     to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS)     or potentially other unspecified impacts.(CVE-2026-42015)

    A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest-Shamir-Adleman - Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication     process.(CVE-2026-42010)

    This ID has been reserved by a CNA(CVE-2026-42014)

    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.(CVE-2026-33846)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure.(CVE-2026-3833)

    A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in     how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly     accept a revoked server certificate, potentially leading to a compromise of trust.(CVE-2026-3832)

    A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative     Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS     hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or     intercept sensitive information.(CVE-2026-42012)

    This ID has been reserved by a CNA(CVE-2026-42014)

    A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service.(CVE-2026-42009)

    A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service.(CVE-2026-33845)

    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.(CVE-2026-33846)

    A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN)     could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This     could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or     man-in-the-middle attacks.(CVE-2026-42013)

    A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an     RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap     overread. This memory corruption vulnerability could lead to information disclosure.(CVE-2026-5260)

    A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This     vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending     to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS)     or potentially other unspecified impacts.(CVE-2026-42015)

    A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest-Shamir-Adleman - Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication     process.(CVE-2026-42010)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:20611 advisory.

    * gnutls: Add more checks to DTLS reassembly (CVE-2026-33846)
    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
    * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
    * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
    * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
    * gnutls: Fix intersecting empty constraints (CVE-2026-42011)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:33125 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS (CVE-2024-12133)

    * gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification     (CVE-2025-14831)

    * gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison (CVE-2026-3833)

    * gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment (CVE-2026-33845)

    * gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly     (CVE-2026-33846)

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)

    * gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)

    * gnutls: gnutls: Security bypass due to incorrect name constraint handling (CVE-2026-42011)

    * gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs     (CVE-2026-42012)

    * gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name (CVE-2026-42013)

    * gnutls: gnutls: Information disclosure via heap overread in RSA key exchange (CVE-2026-5260)

    * gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin (CVE-2026-42014)

    * gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling (CVE-2026-42015)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1780925342 advisory.

  - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption. (CVE-2026-33846)

  - A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service. (CVE-2026-42009)

  - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative     Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS     hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or     intercept sensitive information. (CVE-2026-42012)

  - A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN)     could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This     could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or     man-in-the-middle attacks. (CVE-2026-42013)

  - A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an     RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap     overread. This memory corruption vulnerability could lead to information disclosure. (CVE-2026-5260)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2115-1 advisory.

    This update for gnutls fixes the following issues

    - CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707).
    - CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715).
    - CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716).
    - CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704).
    - CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705).
    - CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708).
    - CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709).
    - CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710).
    - CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711).
    - CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712).
    - CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713).
    - CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds chec (bsc#1263714).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:32962 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison (CVE-2026-3833)

    * gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment (CVE-2026-33845)

    * gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly     (CVE-2026-33846)

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)

    * gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)

    * gnutls: gnutls: Security bypass due to incorrect name constraint handling (CVE-2026-42011)

    * gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs     (CVE-2026-42012)

    * gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name (CVE-2026-42013)

    * gnutls: gnutls: Information disclosure via heap overread in RSA key exchange (CVE-2026-5260)

    * gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin (CVE-2026-42014)

    * gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling (CVE-2026-42015)

    * guntls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal (CVE-2026-5419)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1260:18 advisory.

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
      * gnutls: Fix crashing on an underflow with a DTLS datagram     (CVE-2026-33845)
      * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
      * gnutls: Fix case-sensitivity of domain name comparison in name     constraints (CVE-2026-3833)
      * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
      * gnutls: Denial of Service via heap buffer overflow in DTLS handshake     fragment reassembly (CVE-2026-33846)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
332834	EulerOS 2.0 SP15 : gnutls (EulerOS-SA-2026-2925)	Nessus	Huawei Local Security Checks	2026/8/6	2026/8/6	critical
339248	EulerOS Virtualization 2.13.1 : gnutls (EulerOS-SA-2026-3173)	Nessus	Huawei Local Security Checks	2026/8/25	2026/8/25	critical
317493	RockyLinux 8 : gnutls (RLSA-2026:20611)	Nessus	Rocky Linux Local Security Checks	2026/5/29	2026/5/29	critical
323873	RHEL 8 : gnutls and libtasn1 (RHSA-2026:33125)	Nessus	Red Hat Local Security Checks	2026/6/30	2026/6/30	critical
351685	CentOS Linux 7 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils Multiple Vulnerabilities (CENTOS7:CLSA-2026:1780925342)	Nessus	CentOS Local Security Checks	2026/9/30	2026/9/30	high
319661	SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2026:2115-1)	Nessus	SuSE Local Security Checks	2026/6/8	2026/6/8	critical
323640	RHEL 9 : gnutls (RHSA-2026:32962)	Nessus	Red Hat Local Security Checks	2026/6/29	2026/6/29	critical
326777	MiracleLinux 9 : gnutls-3.8.10-4.el9_8 (AXSA:2026-1260:18)	Nessus	Miracle Linux Local Security Checks	2026/7/14	2026/7/14	critical

检测

插件搜索

critical

critical

critical

critical

high

critical

critical

critical