CVE-2026-3832

Discovered by AISLEPUBLISHEDCWE-179

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

CVSS Base Scores

CVSS v3.1(Primary)
3.7

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

VendorProductVersionStatus
gnutls0affected
Red HatRed Hat Enterprise Linux 100:3.8.10-4.el10_2unaffected
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support0:3.8.9-9.el10_0.19unaffected
Red HatRed Hat Enterprise Linux 90:3.8.10-4.el9_8unaffected
Red HatCert Manager support for Red Hat OpenShift release 1.201790598593unaffected
Red HatRed Hat Discovery 21782159791unaffected
Red HatRed Hat Discovery 21782166952unaffected
Red HatRed Hat Hardened Images3.8.13-1.hum1unaffected
Red HatRed Hat Update Infrastructure 51781525684unaffected
Red HatRed Hat Update Infrastructure 51781525671unaffected
Red HatRed Hat Update Infrastructure 51781525693unaffected
Red HatRed Hat Update Infrastructure 51781525739unaffected
Red HatRed Hat Update Infrastructure 51787241211unaffected
Red HatRed Hat Update Infrastructure 51787135742unaffected
Red HatRed Hat Update Infrastructure 51787241260unaffected
Red HatRed Hat Enterprise Linux 6——
Red HatRed Hat Enterprise Linux 7——
Red HatRed Hat Enterprise Linux 8——
Red HatRed Hat OpenShift Container Platform 4——

References