CVE-2026-33845
Gnutls: gnutls: denial of service via dtls zero-length fragment
Published Apr 30, 2026 · updated Oct 14, 2026
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Timeline
Detection, updates, and resolution for this record.
Apr 30, 2026 · Catalog
Detected
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Oct 14, 2026 · Catalog
Updated
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Affected
- vendor Red Hat Red Hat Enterprise Linux 10version unspecified
- vendor Red Hat Red Hat Enterprise Linux 10.0 Extended Update Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Supportversion unspecified
- vendor Red Hat Red Hat Enterprise Linux 8version unspecified
- vendor Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportversion unspecified
Sources
- CIRCL Vulnerability LookupCVE-2026-33845
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of
vulnerability.circl.lu - CVE.orgCVE-2026-33845
Official CVE identifier
cve.org