Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-42012

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • gnutls

    0

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • libtasn1

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • gnutls

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • openshift/ose-rhel-coreos-9

    Version range not reported

  • cert-manager/jetstack-cert-manager-acmesolver-rhel9

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-bundle

    Version range not reported

  • cert-manager/jetstack-cert-manager-acmesolver-rhel9

    Version range not reported

  • cert-manager/jetstack-cert-manager-rhel9

    Version range not reported

  • cert-manager/cert-manager-istio-csr-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-rhel9

    Version range not reported

  • cert-manager/cert-manager-operator-bundle

    Version range not reported

  • cert-manager/cert-manager-trust-manager-rhel9

    Version range not reported

  • discovery/discovery-server-rhel9

    Version range not reported

  • discovery/discovery-ui-rhel9

    Version range not reported

  • gnutls-main

    Version range not reported

  • rhai/base-image-neuron-rhel9

    Version range not reported

  • rhui5/cds-rhel9

    Version range not reported

  • rhui5/haproxy-rhel9

    Version range not reported

  • rhui5/installer-rhel9

    Version range not reported

  • rhui5/rhua-rhel9

    Version range not reported

  • rhui5/cds-kubernetes-tp-rhel9

    Version range not reported

  • rhui5/installer-tp-rhel9

    Version range not reported

  • rhui5/rhua-tp-rhel9

    Version range not reported

  • gnutls

    Version range not reported

  • openshift4/ose-hypershift-rhel9

    Version range not reported

  • openshift/ose-rhel-coreos-8

    Version range not reported

References 26

access.redhat.com