Frontier models can vanish overnight. Control is the new frontier in security AI.See why→

CVE-2026-42009

Discovered by AISLEPUBLISHEDCWE-475

Description

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.

CVSS Base Scores

CVSS v3.1(Primary)
7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersionStatus
Red HatGnuTLS0:3.8.10-4.el10_2unaffected
Red HatGnuTLS0:3.8.9-9.el10_0.19—
Red HatGnuTLS0:3.3.29-9.el7_9.1—
Red HatGnuTLS0:3.6.16-8.el8_10.6—
Red HatGnuTLS0:3.6.14-10.el8_4.1—
Red HatGnuTLS0:4.13-3.el8_4.1—
Red HatGnuTLS0:3.6.16-5.el8_6.5—
Red HatGnuTLS0:4.13-3.el8_6.2—
Red HatGnuTLS0:3.6.16-7.el8_8.4—
Red HatGnuTLS0:4.13-4.el8_8.1—
Red HatGnuTLS0:3.8.10-4.el9_8—
Red HatGnuTLS0:3.8.3-4.el9_4.6—
Red HatGnuTLS0:3.8.3-6.el9_6.4—
Red HatGnuTLS4.22.9.8.202606230855-0—
Red HatGnuTLS1782159791—
Red HatGnuTLS1782166952—
Red HatGnuTLS3.8.13-1.hum1—
Red HatGnuTLS1781525684—
Red HatGnuTLS1781525671—
Red HatGnuTLS1781525693—
Red HatGnuTLS1781525739—

Credits

  • Red Hat would like to thank Joshua Rogers (AISLE Research Team) for reporting this issue.

References