NetSight
IP …
high7.5

CVE-2026-42009

A flaw was found in gnutls.

Impact

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.

Affected products

VendorProductAffected versions
GnuGnutls
All versions
RedhatHardened Images
All versions
RedhatOpenshift Container Platform
Version 4.0
RedhatEnterprise Linux
Versions 6.0, 7.0, 8.0, 9.0, 9.8, 10.0
RedhatEnterprise Linux For Els
Versions 8.10, 9.8, 10.2
RedhatEnterprise Linux For Ibm Z Systems
Versions 8.0_s390x, 9.0_s390x, 10.2
RedhatEnterprise Linux For Ibm Z Systems Els
Versions 8.10, 9.8, 10.2
RedhatEnterprise Linux For Power Little Endian
Versions 8.0_ppc64le, 9.0_ppc64le, 10.0, 10.2
RedhatEnterprise Linux For Power Little Endian Els
Versions 8.10, 9.8, 10.2
RedhatEnterprise Linux For Eus
Versions 9.8, 10.2
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 9.8, 10.2
RedhatEnterprise Linux For Power Little Endian Eus
Versions 9.8, 10.2

Weakness classification

CWE-475

References