Description
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2026-33845 ↗
- access.redhat.com/errata/RHSA-2026:13274 ↗
- access.redhat.com/errata/RHSA-2026:20611 ↗
- access.redhat.com/errata/RHSA-2026:20612 ↗
- access.redhat.com/errata/RHSA-2026:20613 ↗
- access.redhat.com/errata/RHSA-2026:26319 ↗
- access.redhat.com/errata/RHSA-2026:26409 ↗
- access.redhat.com/errata/RHSA-2026:29197 ↗
- access.redhat.com/errata/RHSA-2026:30004 ↗
- access.redhat.com/errata/RHSA-2026:30849 ↗
- access.redhat.com/errata/RHSA-2026:30850 ↗
- access.redhat.com/errata/RHSA-2026:32962 ↗
- access.redhat.com/errata/RHSA-2026:33125 ↗
- access.redhat.com/errata/RHSA-2026:34372 ↗
- access.redhat.com/errata/RHSA-2026:36004 ↗
- access.redhat.com/errata/RHSA-2026:36005 ↗
- access.redhat.com/errata/RHSA-2026:36006 ↗
- access.redhat.com/errata/RHSA-2026:41921 ↗
- access.redhat.com/errata/RHSA-2026:56786 ↗
- access.redhat.com/errata/RHSA-2026:56853 ↗
- access.redhat.com/errata/RHSA-2026:56911 ↗
- access.redhat.com/errata/RHSA-2026:57402 ↗
- access.redhat.com/errata/RHSA-2026:57483 ↗
- access.redhat.com/errata/RHSA-2026:58981 ↗
- access.redhat.com/errata/RHSA-2026:59831 ↗
- access.redhat.com/errata/RHSA-2026:60019 ↗
- access.redhat.com/errata/RHSA-2026:65839 ↗
- access.redhat.com/errata/RHSA-2026:72502 ↗
- access.redhat.com/errata/RHSA-2026:74674 ↗
- access.redhat.com/errata/RHSA-2026:82304 ↗
- access.redhat.com/errata/RHSA-2026:82322 ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.