CVE-2026-3832
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.
Scoring
- Severity
- LOW
- CVSS base score
- 3.7
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS probability
- 0.74%
- CWE
- CWE-179
- Published
- 2026-04-30
- Last modified
- 2026-09-01
Affected products
- Red Hat Red Hat Hardened Images
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support
- Red Hat Red Hat Update Infrastructure 5
- Red Hat Red Hat Update Infrastructure 5
- Red Hat Red Hat Update Infrastructure 5
- Red Hat Red Hat Update Infrastructure 5
Weakness type
Related vulnerabilities
- CVE-2026-49414 — ASLR bypass for setuid executables via procctl(2)
- CVE-2025-4759 — Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order:...
- CVE-2024-41686 — Password Policy Bypass Vulnerability
- CVE-2022-1271 — An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied...