CVE-2026-3832

3.7 LOW

A flaw was found in gnutls

Published: 2026-04-30 · Last updated: 2026-06-02

Severity and scoring

CVSS: 3.7 LOW
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE: CWE-179

Affected products

Vendor	Product
gnu	enterprise_linux, gnutls, hardened_images
redhat	enterprise_linux, gnutls, hardened_images

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2026-3832
[Other]https://access.redhat.com/errata/RHSA-2026:13274
[Other]https://access.redhat.com/errata/RHSA-2026:20612
[Other]https://access.redhat.com/errata/RHSA-2026:20613
[Other]https://access.redhat.com/security/cve/CVE-2026-3832
[Other]https://bugzilla.redhat.com/show_bug.cgi?id=2445762
[Vendor advisory]https://gitlab.com/gnutls/gnutls/-/issues/1801
[Vendor advisory]https://gitlab.com/gnutls/gnutls/-/issues/1801

Related CVEs

Same vendor

CVE-2026-50259 — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland (7.8 HIGH)
CVE-2026-50258 — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland (7.8 HIGH)
CVE-2026-50257 — A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence() (7.8 HIGH)
CVE-2026-50256 — A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland (7.8 HIGH)
CVE-2026-1784 — The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy (8.8 HIGH)