NetSight
IP …
high7.5

CVE-2026-33845

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and …

Impact

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

Affected products

VendorProductAffected versions
GnuGnutls
All versions
RedhatOpenshift Container Platform
Version 4.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0, 9.0, 10.0

Weakness classification

CWE-191

References