critique
CVE-2026-33845
gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Red Hat7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD, Photon OS. Plus basse selon Red Hat (élevée), AlmaLinux (élevée), Amazon (élevée), Azure Linux (élevée), Oracle (élevée), Rocky Linux (élevée), Ubuntu (moyenne).
Description
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 4.0 | gnutls, gnutls-devel | 3.7.10-7.ph4 |
| Photon OS 5.0 | gnutls, gnutls-devel | 3.8.13-1.ph5 |
| alma 10 | gnutls, gnutls-c++, gnutls-dane et 3 autres | 3.8.10-4.el10_2 |
| alma 8 | gnutls, gnutls-c++, gnutls-dane et 2 autres | 3.6.16-8.el8_10.6 |
| alma 9 | gnutls, gnutls-c++, gnutls-dane et 2 autres | 3.8.10-4.el9_8 |
| alpine 3.20 | gnutls | 3.8.13-r0 |
| alpine 3.21 | gnutls | 3.8.13-r0 |
| alpine 3.22 | gnutls | 3.8.13-r0 |
| alpine 3.23 | gnutls | 3.8.13-r0 |
| alpine 3.24 | gnutls | 3.8.13-r0 |
| alpine edge | gnutls | 3.8.13-r0 |
| amazon linux 2 | gnutls, gnutls-c++, gnutls-dane et 3 autres | 3.3.29-9.amzn2.0.4 |
Afficher les 138 entrées de 54 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| Photon OS 4.0 | gnutls | 3.7.10-7.ph4 |
| Photon OS 4.0 | gnutls-devel | 3.7.10-7.ph4 |
| Photon OS 5.0 | gnutls | 3.8.13-1.ph5 |
| Photon OS 5.0 | gnutls-devel | 3.8.13-1.ph5 |
| alma 10 | gnutls | 3.8.10-4.el10_2 |
| alma 10 | gnutls-c++ | 3.8.10-4.el10_2 |
| alma 10 | gnutls-dane | 3.8.10-4.el10_2 |
| alma 10 | gnutls-devel | 3.8.10-4.el10_2 |
| alma 10 | gnutls-fips | 3.8.10-4.el10_2 |
| alma 10 | gnutls-utils | 3.8.10-4.el10_2 |
| alma 8 | gnutls | 3.6.16-8.el8_10.6 |
| alma 8 | gnutls-c++ | 3.6.16-8.el8_10.6 |
| alma 8 | gnutls-dane | 3.6.16-8.el8_10.6 |
| alma 8 | gnutls-devel | 3.6.16-8.el8_10.6 |
| alma 8 | gnutls-utils | 3.6.16-8.el8_10.6 |
| alma 9 | gnutls | 3.8.10-4.el9_8 |
| alma 9 | gnutls-c++ | 3.8.10-4.el9_8 |
| alma 9 | gnutls-dane | 3.8.10-4.el9_8 |
| alma 9 | gnutls-devel | 3.8.10-4.el9_8 |
| alma 9 | gnutls-utils | 3.8.10-4.el9_8 |
| alpine 3.20 | gnutls | 3.8.13-r0 |
| alpine 3.21 | gnutls | 3.8.13-r0 |
| alpine 3.22 | gnutls | 3.8.13-r0 |
| alpine 3.23 | gnutls | 3.8.13-r0 |
| alpine 3.24 | gnutls | 3.8.13-r0 |
| alpine edge | gnutls | 3.8.13-r0 |
| amazon linux 2 | gnutls | 3.3.29-9.amzn2.0.4 |
| amazon linux 2 | gnutls-c++ | 3.3.29-9.amzn2.0.4 |
| amazon linux 2 | gnutls-dane | 3.3.29-9.amzn2.0.4 |
| amazon linux 2 | gnutls-debuginfo | 3.3.29-9.amzn2.0.4 |
| amazon linux 2 | gnutls-devel | 3.3.29-9.amzn2.0.4 |
| amazon linux 2 | gnutls-utils | 3.3.29-9.amzn2.0.4 |
| amazon linux 2023 | gnutls | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-c++ | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-c++-debuginfo | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-dane | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-dane-debuginfo | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-debuginfo | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-debugsource | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-devel | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-utils | 3.8.3-8.amzn2023.0.4 |
| amazon linux 2023 | gnutls-utils-debuginfo | 3.8.3-8.amzn2023.0.4 |
| Azure Linux 3.0 | gnutls | 0:3.8.3-9.azl3 |
| debian 11 | gnutls28 | 3.7.1-5+deb11u10 |
| debian 12 | gnutls28 | 3.7.9-2+deb12u7 |
| debian 13 | gnutls28 | 3.8.9-3+deb13u4 |
| debian 14 | gnutls28 | 3.8.13-1 |
| echo | gnutls28 | 3.7.9-2+deb12u7 |
| Oracle Linux 7 | gnutls | 3.3.29-9.0.1.el7_9 |
| Oracle Linux 7 | gnutls-c++ | 3.3.29-9.0.1.el7_9 |
| Oracle Linux 7 | gnutls-dane | 3.3.29-9.0.1.el7_9 |
| Oracle Linux 7 | gnutls-devel | 3.3.29-9.0.1.el7_9 |
| Oracle Linux 7 | gnutls-utils | 3.3.29-9.0.1.el7_9 |
| Oracle Linux 8 | gnutls | 3.6.16-8.el8_10.6 |
| Oracle Linux 8 | gnutls-c++ | 3.6.16-8.el8_10.6 |
| Oracle Linux 8 | gnutls-dane | 3.6.16-8.el8_10.6 |
| Oracle Linux 8 | gnutls-devel | 3.6.16-8.el8_10.6 |
| Oracle Linux 8 | gnutls-utils | 3.6.16-8.el8_10.6 |
| Oracle Linux 9 | gnutls | 3.8.10-4.el9_8 |
| Oracle Linux 9 | gnutls-c++ | 3.8.10-4.el9_8 |
| Oracle Linux 9 | gnutls-dane | 3.8.10-4.el9_8 |
| Oracle Linux 9 | gnutls-devel | 3.8.10-4.el9_8 |
| Oracle Linux 9 | gnutls-utils | 3.8.10-4.el9_8 |
| rapidfort alma 10 | gnutls | 0:3.8.10-4.el10_2 |
| rapidfort alma 10 | gnutls-c++ | 3.8.10-4.el10_2 |
| rapidfort alma 10 | gnutls-dane | 0:3.8.10-4.el10_2 |
| rapidfort alma 10 | gnutls-devel | 3.8.10-4.el10_2 |
| rapidfort alma 10 | gnutls-fips | 3.8.10-4.el10_2 |
| rapidfort alma 10 | gnutls-utils | 0:3.8.10-4.el10_2 |
| rapidfort alma 9 | gnutls | 0:3.8.10-4.el9_8 |
| rapidfort alma 9 | gnutls-c++ | 3.8.10-4.el9_8 |
| rapidfort alma 9 | gnutls-dane | 0:3.8.10-4.el9_8 |
| rapidfort alma 9 | gnutls-devel | 3.8.10-4.el9_8 |
| rapidfort alma 9 | gnutls-utils | 0:3.8.10-4.el9_8 |
| rapidfort alpine 3.20 | gnutls | 3.8.13-r0 |
| rapidfort alpine 3.21 | gnutls | 3.8.13-r0 |
| rapidfort alpine 3.22 | gnutls | 3.8.13-r0 |
| rapidfort alpine 3.23 | gnutls | 3.8.13-r0 |
| rapidfort alpine 3.24 | gnutls | 3.8.13-r0 |
| rapidfort amazon linux 2023 | gnutls | 0:3.8.3-8.amzn2023.0.4 |
| rapidfort amazon linux 2023 | gnutls-c++ | 3.8.3-8.amzn2023.0.4 |
| rapidfort amazon linux 2023 | gnutls-dane | 0:3.8.3-8.amzn2023.0.4 |
| rapidfort amazon linux 2023 | gnutls-devel | 3.8.3-8.amzn2023.0.4 |
| rapidfort amazon linux 2023 | gnutls-utils | 3.8.3-8.amzn2023.0.4 |
| rapidfort debian 12 | gnutls28 | 0:3.7.9-2+deb12u7, 0:3.8.13-1, 0:3.8.9-3+deb13u4 |
| rapidfort debian 12 | rf-gnutls28 | 0:3.8.13-1, 0:3.8.9-3+deb13u4 |
| rapidfort debian 13 | gnutls28 | 0:3.7.9-2+deb12u7, 0:3.8.13-1, 0:3.8.9-3+deb13u4 |
| rapidfort debian 13 | rf-gnutls28 | 0:3.8.13-1, 0:3.8.9-3+deb13u4 |
| rapidfort Oracle Linux 10 | gnutls | 0:3.8.10-4.el10_2 |
| rapidfort Oracle Linux 10 | gnutls-c++ | 0:3.8.10-4.el10_2 |
| rapidfort Oracle Linux 10 | gnutls-dane | 0:3.8.10-4.el10_2 |
| rapidfort Oracle Linux 10 | gnutls-devel | 0:3.8.10-4.el10_2 |
| rapidfort Oracle Linux 10 | gnutls-fips | 0:3.8.10-4.el10_2 |
| rapidfort Oracle Linux 10 | gnutls-utils | 0:3.8.10-4.el10_2 |
| rapidfort Oracle Linux 9 | gnutls | 0:3.8.10-4.el9_8 |
| rapidfort Oracle Linux 9 | gnutls-c++ | 0:3.8.10-4.el9_8 |
| rapidfort Oracle Linux 9 | gnutls-dane | 0:3.8.10-4.el9_8 |
| rapidfort Oracle Linux 9 | gnutls-devel | 0:3.8.10-4.el9_8 |
| rapidfort Oracle Linux 9 | gnutls-utils | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | gnutls | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | gnutls-c++ | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | gnutls-dane | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | gnutls-devel | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | gnutls-utils | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | rf-gnutls | 0:3.8.10-4.el9_8 |
| rapidfort rocky 9 | rf-gnutls-dane | 0:3.8.10-4.el9_8 |
| rapidfort ubuntu 20.04 | gnutls28 | 0:3.7.3-4ubuntu1.9, 0:3.8.3-1.1ubuntu3.6, 0:3.8.9-3ubuntu2.2 |
| rapidfort ubuntu 20.04 | rf-gnutls28 | 0:3.7.3-4ubuntu1.9, 0:3.8.3-1.1ubuntu3.6, 0:3.8.9-3ubuntu2.2 |
| rapidfort ubuntu 22.04 | gnutls28 | 0:3.7.3-4ubuntu1.9, 0:3.8.3-1.1ubuntu3.6, 0:3.8.9-3ubuntu2.2 |
| rapidfort ubuntu 22.04 | rf-gnutls28 | 0:3.7.3-4ubuntu1.9, 0:3.8.3-1.1ubuntu3.6, 0:3.8.9-3ubuntu2.2 |
| rapidfort ubuntu 24.04 | gnutls28 | 0:3.7.3-4ubuntu1.9, 0:3.8.3-1.1ubuntu3.6, 0:3.8.9-3ubuntu2.2 |
| rapidfort ubuntu 24.04 | rf-gnutls28 | 0:3.7.3-4ubuntu1.9, 0:3.8.3-1.1ubuntu3.6, 0:3.8.9-3ubuntu2.2 |
| Red Hat | openshift/ose-rhel-coreos-8 | pas de correctif indiqué |
| Red Hat | openshift/ose-rhel-coreos-9 | pas de correctif indiqué |
| Red Hat | openshift4/ose-hypershift-rhel9 | pas de correctif indiqué |
| rocky 10 | gnutls | 3.8.10-4.el10_2 |
| rocky 8 | gnutls | 3.6.16-8.el8_10.6 |
| rocky 9 | gnutls | 3.8.10-4.el9_8 |
| root.io alpine 3.22 | rootio-gnutls | 3.8.13-r0 |
| root.io debian 12 | gnutls28 | 3.7.9-2+deb12u7 |
| root.io debian 12 | rootio-gnutls28 | 3.7.9-2+deb12u7 |
| root.io debian 13 | gnutls28 | 3.8.9-3+deb13u4 |
| root.io debian 13 | rootio-gnutls28 | 3.8.9-3+deb13u4 |
| seal debian | gnutls28 | 3.7.9-2+sp999, 3.7.9-2+deb12u4+sp999, 3.8.3-1.1ubuntu3.2+sp999 |
| seal debian | seal-gnutls28 | 3.7.9-2+sp999, 3.7.9-2+deb12u4+sp999, 3.8.3-1.1ubuntu3.2+sp999 |
| seal Red Hat 6 | libtasn1 | 2.3-6.el6_5+sp999 |
| seal Red Hat 6 | seal-libtasn1 | 2.3-6.el6_5+sp999 |
| seal Red Hat 7 | libtasn1 | 4.10-1.el7+sp999 |
| seal Red Hat 7 | seal-libtasn1 | 4.10-1.el7+sp999 |
| seal Red Hat 8 | gnutls | 3.6.16-8.el8_9.3+sp2 |
| seal Red Hat 8 | libtasn1 | 4.13-4.el8_7+sp999 |
| seal Red Hat 8 | seal-gnutls | 3.6.16-8.el8_9.3+sp2 |
| seal Red Hat 8 | seal-libtasn1 | 4.13-4.el8_7+sp999 |
| ubuntu 20.04-ESM | gnutls28 | 3.6.13-2ubuntu1.12+esm2 |
| ubuntu 22.04 | gnutls28 | 3.7.3-4ubuntu1.9 |
| ubuntu 24.04 | gnutls28 | 3.8.3-1.1ubuntu3.6 |
| ubuntu 25.10 | gnutls28 | 3.8.9-3ubuntu2.2 |
| ubuntu 26.04 | gnutls28 | 3.8.12-2ubuntu1.1 |
Références
- https://access.redhat.com/errata/RHSA-2026:13274
- https://access.redhat.com/errata/RHSA-2026:20611
- https://access.redhat.com/errata/RHSA-2026:20612
- https://access.redhat.com/errata/RHSA-2026:20613
- https://access.redhat.com/errata/RHSA-2026:26319
- https://access.redhat.com/errata/RHSA-2026:26409
- https://access.redhat.com/errata/RHSA-2026:29197
- https://access.redhat.com/errata/RHSA-2026:30004
Les 79 références
- https://access.redhat.com/errata/RHSA-2026:30849
- https://access.redhat.com/errata/RHSA-2026:30850
- https://access.redhat.com/errata/RHSA-2026:32962
- https://access.redhat.com/errata/RHSA-2026:33125
- https://access.redhat.com/errata/RHSA-2026:34372
- https://access.redhat.com/errata/RHSA-2026:36004
- https://access.redhat.com/errata/RHSA-2026:36005
- https://access.redhat.com/errata/RHSA-2026:36006
- https://access.redhat.com/errata/RHSA-2026:41921
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:56911
- https://access.redhat.com/errata/RHSA-2026:57402
- https://access.redhat.com/errata/RHSA-2026:57483
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:59831
- https://access.redhat.com/errata/RHSA-2026:60019
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-33845
- https://bugzilla.redhat.com/2445763
- https://bugzilla.redhat.com/2450624
- https://bugzilla.redhat.com/2450625
- https://bugzilla.redhat.com/2467279
- https://bugzilla.redhat.com/2467289
- https://bugzilla.redhat.com/2467437
- https://bugzilla.redhat.com/show_bug.cgi?id=2445762
- https://bugzilla.redhat.com/show_bug.cgi?id=2445763
- https://bugzilla.redhat.com/show_bug.cgi?id=2450624
- https://bugzilla.redhat.com/show_bug.cgi?id=2450625
- https://bugzilla.redhat.com/show_bug.cgi?id=2467279
- https://bugzilla.redhat.com/show_bug.cgi?id=2467289
- https://bugzilla.redhat.com/show_bug.cgi?id=2467437
- https://bugzilla.redhat.com/show_bug.cgi?id=2467441
- https://bugzilla.redhat.com/show_bug.cgi?id=2467448
- https://bugzilla.redhat.com/show_bug.cgi?id=2467450
- https://bugzilla.redhat.com/show_bug.cgi?id=2467451
- https://bugzilla.redhat.com/show_bug.cgi?id=2467678
- https://bugzilla.redhat.com/show_bug.cgi?id=2467686
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33845
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33846
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3832
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-3833
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42009
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42010
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42011
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42012
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42013
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42014
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42015
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5260
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5419
- https://errata.almalinux.org/9/ALSA-2026-20612.html
- https://errata.rockylinux.org/RLSA-2026:20612
- https://linux.oracle.com/cve/CVE-2026-33845.html
- https://linux.oracle.com/errata/ELSA-2026-50346.html
- https://nvd.nist.gov/vuln/detail/CVE-2026-33845
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json
- https://ubuntu.com/security/notices/USN-8284-1
- https://ubuntu.com/security/notices/USN-8502-1
- https://www.cve.org/CVERecord?id=CVE-2026-33845
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-3