High WID-SEC-2026-3843 6 CVEs

GnuTLS: Mehrere Schwachstellen

Published Oct 8, 2026 · Updated Oct 8, 2026 · de-DE

Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten offenzulegen oder zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.

Product

GnuTLS (GNU Transport Layer Security Library) ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.

Vulnerabilities 6

Medium 6.5

CVE-2026-88647

GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name when Subject Alternative Name h…

gnutls28 gnutls28 gnutls gnutls26 Debian Ubuntu Azure Linux

Oct 8, 2026
Medium 5.9

CVE-2026-95184

GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted subtree violation for "EE O=E…

gnutls28 gnutls28 gnutls gnutls26 Debian Ubuntu Azure Linux

Oct 8, 2026
Medium 5.9

CVE-2026-95209 Rejected

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Furth…

gnutls28 gnutls28 gnutls gnutls26 Debian Ubuntu Azure Linux

Oct 8, 2026
Medium 4.8

CVE-2026-95210

GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, such as when extnValue is an …

gnutls28 gnutls28 gnutls gnutls26 Debian Ubuntu Azure Linux

Oct 8, 2026
Low 3.7

CVE-2026-67693

GnuTLS v3.8.13 does not reject end-entity X.509 certificates that contain a contradictory combination of Key Usage (KU)…

gnutls28 gnutls28 gnutls gnutls26 Debian Ubuntu Azure Linux

Oct 8, 2026
Low 3.7

CVE-2026-88648

In GnuTLS v3.8.13, an excluded msUPN/SRV otherName is never checked. NOTE: the Supplier does not consider this an actio…

gnutls28 gnutls28 gnutls gnutls26 Debian Ubuntu Azure Linux

Oct 8, 2026

Revision history

2026-10-08 #1
Initiale Fassung

References

GitHub Advisory Database vom 2026-10-08
https://github.com/advisories/GHSA-2J2X-FFFQ-FF4Q
GitHub Advisory Database vom 2026-10-08
https://github.com/advisories/GHSA-9MFX-G534-Q3PC
GitHub Advisory Database vom 2026-10-08
https://github.com/advisories/GHSA-PRFJ-H7XQ-VV26
GitHub Advisory Database vom 2026-10-08
https://github.com/advisories/GHSA-8FV7-XP4R-4X4Q
GitHub Advisory Database vom 2026-10-08
https://github.com/advisories/GHSA-GXJ4-87QM-HMC3
GitHub Advisory Database vom 2026-10-08
https://github.com/advisories/GHSA-J75V-5PM7-3CG8