← Back

CVE-2026-3832

nvd nist
Published: Apr 30, 2026Modified: Jul 13, 2026

JSON object

Loading...
3.7
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.2 / Impact: 1.4
Source: secalert@redhat.com (Secondary)

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Affected (8)

Gnu
1 product
Gnutls
Redhat
3 products
Enterprise Linux
Hardened Images
Openshift Container Platform
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Gnutls
All versions
Redhat
Enterprise Linux
Version 10.0
Enterprise Linux
Version 6.0
Enterprise Linux
Version 7.0
Enterprise Linux
Version 8.0
Enterprise Linux
Version 9.0
Hardened Images
All versions
Openshift Container Platform
Version 4.0

Related CWEs

CWE-179
Incorrect Behavior Order: Early Validation
The product validates input before applying protection mechanisms that modify the input, which could allow an attacker to bypass the validation via dangerous inputs that only arise after the modification.

References (10)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingThird Party Advisory
Source: secalert@redhat.com
ExploitIssue TrackingVendor Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitIssue TrackingVendor Advisory

Timeline

No history available yet.