Veille CVE
CVE-2026-3832
3.7 FaibleDescription
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.
Produits concernés
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Enterprise Linux 9
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20
- Red Hat Discovery 2
- Red Hat Hardened Images
- Red Hat Update Infrastructure 5
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat OpenShift Container Platform 4
- Gnu gnutls
- Redhat hardened images
- Redhat openshift container platform
- Redhat enterprise linux
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 3.7 Faible | secalert@redhat.com | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
Faiblesses (CWE)
Références
- https://access.redhat.com/errata/RHSA-2026:13274 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:20612
- https://access.redhat.com/errata/RHSA-2026:20613
- https://access.redhat.com/errata/RHSA-2026:26319
- https://access.redhat.com/errata/RHSA-2026:26409
- https://access.redhat.com/errata/RHSA-2026:29197
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-3832 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2445762 Issue TrackingThird Party Advisory
- https://gitlab.com/gnutls/gnutls/-/issues/1801 ExploitIssue TrackingVendor Advisory
- https://gitlab.com/gnutls/gnutls/-/issues/1801 ExploitIssue TrackingVendor Advisory