CVE-2026-1584

CVE-2026-1584 · Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

CVSS 7.5 · Alta · EPSS 1,3% · Corrección disponible

Publicación

2026-04-09T18:00:21.184Z

Actualización

2026-09-01T12:04:47.420Z

Pila tecnológica: system

Comprueba tu servidor →