← לוח פגיעויות

CVE-2026-3833

גבוהה 7.4

תיאור (מקור, אנגלית)

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

מדדים

CVSS 3.1
7.4 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS — סבירות ניצול
1% (אחוזון 100) נכון ל-27/9/2026
CWE
CWE-178

מוצרים מושפעים

gnu: gnutls; redhat: hardened images; redhat: openshift container platform; redhat: enterprise linux

קישורים