CVE-2026-1584

CVE-2026-1584 · Gnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

CVSS 7.5 · Élevée · EPSS 1,3% · Correctif disponible

Publication

2026-04-09T18:00:21.184Z

Mise à jour

2026-09-01T12:04:47.420Z

Pile logicielle: system

Vérifiez votre serveur →