Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-42011

Gnutls: gnutls: security bypass due to incorrect name constraint handling

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems.

Timeline

  1. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  2. CVE published
  3. Record last updated

Affected versions

  • gnutls

    0

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • cert-manager/jetstack-cert-manager-acmesolver-rhel9

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-bundle

    Version range not reported

  • cert-manager/jetstack-cert-manager-acmesolver-rhel9

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • cert-manager/cert-manager-istio-csr-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-bundle

    Version range not reported

  • cert-manager/cert-manager-trust-manager-rhel9

    Version range not reported

  • discovery/discovery-server-rhel9

    Version range not reported

  • discovery/discovery-ui-rhel9

    Version range not reported

  • gnutls-main

    Version range not reported

  • rhai/base-image-neuron-rhel9

    Version range not reported

  • rhui5/cds-rhel9

    Version range not reported

  • rhui5/haproxy-rhel9

    Version range not reported

  • rhui5/installer-rhel9

    Version range not reported

  • rhui5/rhua-rhel9

    Version range not reported

  • rhui5/cds-kubernetes-tp-rhel9

    Version range not reported

  • rhui5/installer-tp-rhel9

    Version range not reported

  • rhui5/rhua-tp-rhel9

    Version range not reported

  • gnutls

    Version range not reported

  • openshift4/ose-hypershift-rhel9

    Version range not reported

References 25

access.redhat.com