The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:20613 advisory.

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)
      * gnutls: Fix crashing on an underflow with a DTLS datagram (CVE-2026-33845)
      * gnutls: Fix RSA-PSK identity truncation (CVE-2026-42010)
      * gnutls: Fix case-sensitivity of domain name comparison in name constraints (CVE-2026-3833)
      * gnutls: Fix intersecting empty name constraints (CVE-2026-42011)
      * gnutls: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly     (CVE-2026-33846)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:30004 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison (CVE-2026-3833)

    * gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment (CVE-2026-33845)

    * gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly     (CVE-2026-33846)

    * gnutls: Fix qsort comparator in DTLS reassembly (CVE-2026-42009)

    * gnutls: gnutls: Authentication Bypass via NUL Character in Username (CVE-2026-42010)

    * gnutls: gnutls: Security bypass due to incorrect name constraint handling (CVE-2026-42011)

    * gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs     (CVE-2026-42012)

    * gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name (CVE-2026-42013)

    * gnutls: gnutls: Information disclosure via heap overread in RSA key exchange (CVE-2026-5260)

    * gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin (CVE-2026-42014)

    * gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling (CVE-2026-42015)

    * guntls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal (CVE-2026-5419)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-20612 advisory.

    - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite)
    - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour)
    - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread)
    - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass)
    - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass)
    - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass)
    - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse)
    - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse)
    - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free)
    - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread)
    - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite)
    - Fix CVE-2026-3832 (OCSP, Low, revocation bypass)
    - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gnutls-3.8.10-4.el9 build changelog.

  - A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure. (CVE-2026-3833)

  - A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that     handles PKCS#11 token initialization. When a token label longer than expected is processed, the function     writes past the end of a fixed-size stack buffer. This programming error can cause the application using     GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or     applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation     attacks. (CVE-2025-9820)

  - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service. (CVE-2026-33845)

  - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption. (CVE-2026-33846)

  - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in     how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly     accept a revoked server certificate, potentially leading to a compromise of trust. (CVE-2026-3832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the gnutls package has been released.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4595 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4595-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                       Guilhem Moulin     May 22, 2026                                  https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : gnutls28     Version        : 3.7.1-5+deb11u10     CVE ID         : CVE-2026-3833 CVE-2026-5260 CVE-2026-33845 CVE-2026-33846                      CVE-2026-42009 CVE-2026-42010 CVE-2026-42011 CVE-2026-42012                      CVE-2026-42013 CVE-2026-42014 CVE-2026-42015     Debian Bug     : 1135319

    Multiple vulnerabilities were found in GnuTLS, a portable library which     implements the Transport Layer Security and Datagram Transport Layer     Security protocols, which may lead to constraint bypass, denial of     service, information disclosure, authentication bypass or potentially     execution of arbitrary code.

    CVE-2026-3833

        Oleh Konko and Joshua Rogers independently discovered that domain         name comparison during name constraints processing was         case-sensitive, thereby violating RFC 5280  7.2.  For excluded name         constraints, this could lead to incorrectly accepting domain names         that should've been rejected.

    CVE-2026-5260

        Joshua Rogers discovered that for a server using an RSA key backed         by a PKCS#11 token, a client sending an extremely short premaster         secret during an RSA key exchange could trigger a short heap         overread.

    CVE-2026-33845

        Joshua Rogers a remotely triggerable underflow in the DTLS         reassembly code leading to a heap overrun.

    CVE-2026-33846

        Haruto Kimura, Oscar Reparaz and Zou Dikai independently discovered         that GnuTLS failed to properly check that DTLS fragments claimed a         consistent message_length value, and that a missing bound check on         the array was missing, enabling an attacker to cause a heap         overwrite.

    CVE-2026-42009

        Joshua Rogers discovered that the comparator function used for         ordering DTLS packets by sequence numbers did not follow qsort         comparator contracts in case of packets with duplicate sequence         numbers, which could lead to undefined behaviour.

    CVE-2026-42010

        Joshua Rogers discovered that servers configured with RSA-PSK         wrongfully matched usernames with NUL character in them to ones         truncated to NUL character, which could lead to an authentication         bypass.

    CVE-2026-42011

        Haruto Kimura discovered that permitted name constraints were         wrongfully ignored when prior CAs only had excluded name         constraints, resulting in a name constraint bypass.

    CVE-2026-42012

        Oleh Konko discovered that certificates containing URI or SRV         Subject Alternative Names would fall back to checking DNS hostnames         against Common Name, allowing potential misuse of such certificates         beyond their original purpose.

    CVE-2026-42013

        Haruto Kimura and Joshua Rogers independently discovered that         validation of certificates with oversized Subject Alternative Names         would fall back to checking DNS hostnames against Common Name.

    CVE-2026-42014

        Luigino Camastra and Joshua Rogers discovered that changing the         Security Officer PIN with `gnutls_pkcs11_token_set_pin()` with         `oldpin == NULL` for a token lacking a protected authentication path         led to a use-after-free.

    CVE-2026-42015

        Zou Dikai discovered that appending to a PKCS#12 bag that already         contained 32 elements could write past the bag's internal array.

    This update also fixes additional security issues for which no CVE ID     was assigned yet:

        Joshua Rogers discovered that rehandshaking to a username with         embedded NUL character could theoretically allow bypassing the         `GNUTLS_ALLOW_ID_CHANGE` protection.

        Joshua Rogers discovered that the OCSP signing EKU OID was compared         without verifying its length, allowing a shorter OID that shares the         same prefix to match.

        Haruto Kimura discovered a possible invalid pointer dereference in         the PKCS#11 trust removal error path.

        Kamil Frankowicz discovered that `gnutls_privkey_verify_params()`         overlooked the scenario of `p` and `q` not being co-prime.  It now         returns `GNUTLS_E_PK_INVALID_PRIVKEY` in this case.

        Joshua Rogers discovered that if `gnutls_x509_crt_list_import_pkcs11()`         failed partway through, then the trust list cleanup code would try         to free already-deinitialized certificate entries, leading to a         double-free.

        Kamil Frankowicz and Joshua Rogers idependently discovered that         insufficient bounds checking on the PEM header length could lead to         short heap overreads on specially crafted inputs.

    For Debian 11 bullseye, these problems have been fixed in version     3.7.1-5+deb11u10.

    We recommend that you upgrade your gnutls28 packages.

    For the detailed security status of gnutls28 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gnutls28

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the  packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption.(CVE-2026-33846)

    A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service.(CVE-2026-33845)

    A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure.(CVE-2026-3833)

    A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer     Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by     sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to     unstable packet ordering or undefined behavior, resulting in a denial of service.(CVE-2026-42009)

    A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest-Shamir-Adleman - Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication     process.(CVE-2026-42010)

    A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security     Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change     the PIN with a NULL old PIN for a token that lacks a protected authentication path.(CVE-2026-42014)

    A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN)     could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This     could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or     man-in-the-middle attacks.(CVE-2026-42013)

    A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an     RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap     overread. This memory corruption vulnerability could lead to information disclosure.(CVE-2026-5260)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 11.0.1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.8 advisory.

  - A flaw was found in gnutls. Servers configured with RSA-PSK (RivestShamirAdleman  Pre-Shared Key)     wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could     exploit this by sending a specially crafted username, leading to an authentication bypass. This     vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
    (CVE-2026-42010)

  - Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send     contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer     might contain sensitive data from the previous execution of the application process which leads to     sensitive data leakage to an attacker. RSA_public_encrypt() returns the number of bytes written on success     and -1 on error. The affected code tests only whether the return value is non-zero. As a result, if RSA     encryption fails, encapsulation can still return success to the caller, set the output lengths, and leave     the caller to use the contents of the ciphertext buffer as if a valid KEM ciphertext had been produced. If     applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an attacker-supplied invalid RSA public key     without first validating that key, then this may cause stale or uninitialized contents of the caller-     provided ciphertext buffer to be disclosed to the attacker in place of the KEM ciphertext. As a workaround     calling EVP_PKEY_public_check() or EVP_PKEY_public_check_quick() before EVP_PKEY_encapsulate() will     mitigate the issue. The FIPS modules in 3.6, 3.5, 3.4, 3.3, 3.1 and 3.0 are affected by this issue.
    (CVE-2026-31790)

  - Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version     2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in     a one byte heap buffer overflow. (CVE-2026-5450)

  - An issue was discovered in xmllint (from libxml2) before 2.11.8 and 2.12.x before 2.12.7. Formatting error     messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c.
    (CVE-2024-34459)

  - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service. (CVE-2026-33845)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
325758	AlmaLinux 10 : gnutls (ALSA-2026:20613)	Nessus	Alma Linux Local Security Checks	7/9/2026	7/9/2026	critical
322970	RHEL 9 : gnutls (RHSA-2026:30004)	Nessus	Red Hat Local Security Checks	6/26/2026	6/26/2026	critical
322988	Oracle Linux 9 : gnutls (ELSA-2026-20612)	Nessus	Oracle Linux Local Security Checks	6/26/2026	6/26/2026	critical
312106	CentOS 9 : gnutls-3.8.10-4.el9	Nessus	CentOS Local Security Checks	5/4/2026	5/14/2026	critical
316057	Photon OS 4.0: Gnutls PHSA-2026-4.0-1016	Nessus	PhotonOS Local Security Checks	5/21/2026	5/25/2026	critical
316551	Debian dla-4595 : gnutls-bin - security update	Nessus	Debian Local Security Checks	5/25/2026	5/25/2026	critical
328551	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2727)	Nessus	Huawei Local Security Checks	7/21/2026	7/21/2026	critical
332328	Photon OS 5.0: Gnutls PHSA-2026-5.0-92-0852	Nessus	PhotonOS Local Security Checks	8/5/2026	8/5/2026	critical
339446	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.8)	Nessus	Misc.	8/25/2026	8/25/2026	high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

high