CVE-2026-3833

CVE-2026-3833 · Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.

CVSS 6.5 · Moyenne · EPSS 0,6% · Correctif disponible

Publication

2026-04-30T17:37:05.818Z

Mise à jour

2026-10-14T19:24:09.620Z

Pile logicielle: system

Vérifiez votre serveur →