HarborGuard / CVE
Back to search
HIGHCVE-2026-1584Published Modified CNA redhat

CVE-2026-1584: Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

Metrics

CVSS v3.1
7.5
Severity
HIGH
Fixed in
3.8.12-1.1.hum1
Affected Products
7

Fix available

3.8.12-1.1.hum1
Affected packages
  • Red Hat / Red Hat Hardened Images
    Fixed in 3.8.12-1.1.hum1
  • Red Hat / Red Hat Enterprise Linux 10
  • Red Hat / Red Hat Enterprise Linux 6
  • Red Hat / Red Hat Enterprise Linux 7
  • Red Hat / Red Hat Enterprise Linux 8
  • Red Hat / Red Hat Enterprise Linux 9
  • Red Hat / Red Hat OpenShift Container Platform 4
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References