7.5
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
Засегнати продукти
- : преди 3.8.13
- Red Hat Red Hat Enterprise Linux 10: 0:3.8.10-4.el10_2 преди *
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: 0:3.8.9-9.el10_0.19 преди *
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 0:3.3.29-9.el7_9.1 преди *
- Red Hat Red Hat Enterprise Linux 8: 0:3.6.16-8.el8_10.6 преди *
- Red Hat Red Hat Enterprise Linux 8: 0:3.6.16-8.el8_10.6 преди *
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:3.6.14-10.el8_4.1 преди *
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 0:4.13-3.el8_4.1 преди *
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:3.6.14-10.el8_4.1 преди *
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: 0:4.13-3.el8_4.1 преди *
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:3.6.16-5.el8_6.5 преди *
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 0:4.13-3.el8_6.2 преди *
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:3.6.16-5.el8_6.5 преди *
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: 0:4.13-3.el8_6.2 преди *
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:3.6.16-7.el8_8.4 преди *
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 0:4.13-4.el8_8.1 преди *
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:3.6.16-7.el8_8.4 преди *
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 0:4.13-4.el8_8.1 преди *
- Red Hat Red Hat Enterprise Linux 9: 0:3.8.10-4.el9_8 преди *
- Red Hat Red Hat Enterprise Linux 9: 0:3.8.10-4.el9_8 преди *
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:3.7.6-21.el9_2.7 преди *
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: 0:3.8.3-4.el9_4.6 преди *
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: 0:3.8.3-6.el9_6.4 преди *
- Red Hat Red Hat OpenShift Container Platform 4.12: 412.86.202608241157-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.13: 413.92.202609080414-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.14: 414.92.202608172040-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.15: 415.92.202608180329-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.16: 416.94.202608150307-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.17: 417.94.202608250221-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.18: 418.94.202608142238-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.19: 4.19.9.6.202607151909-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.20: 4.20.9.6.202607010620-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.21: 4.21.9.6.202607011303-0 преди *
- Red Hat Red Hat OpenShift Container Platform 4.22: 4.22.9.8.202606230855-0 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791371080 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791371069 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791788287 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.17: 1791970484 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459707 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459711 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791459759 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1789029076 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: 1791966259 преди *
- Red Hat Cert Manager support for Red Hat OpenShift release 1.20: 1790598593 преди *
- Red Hat Red Hat AI Inference Server 3.2: 1782951051 преди *
- Red Hat Red Hat AI Inference Server 3.2: 1782951012 преди *
- Red Hat Red Hat AI Inference Server 3.2: 1782951244 преди *
- Red Hat Red Hat Discovery 2: 1782159791 преди *
- Red Hat Red Hat Discovery 2: 1782166952 преди *
- Red Hat Red Hat Hardened Images: 3.8.13-1.hum1 преди *
- Red Hat Red Hat OpenShift AI 3.4: 1790703542 преди *
- Red Hat Red Hat Update Infrastructure 5: 1781525684 преди *
- Red Hat Red Hat Update Infrastructure 5: 1781525671 преди *
- Red Hat Red Hat Update Infrastructure 5: 1781525693 преди *
- Red Hat Red Hat Update Infrastructure 5: 1781525739 преди *
- Red Hat Red Hat Update Infrastructure 5: 1787241211 преди *
- Red Hat Red Hat Update Infrastructure 5: 1787135742 преди *
- Red Hat Red Hat Update Infrastructure 5: 1787241260 преди *
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 5
Вид слабост
История
- 18 май 2026 Публикувано
Други уязвимости в същия продукт
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-42009
- https://nvd.nist.gov/vuln/detail/CVE-2026-42009
- https://access.redhat.com/errata/RHSA-2026:13274
- https://access.redhat.com/errata/RHSA-2026:20611
- https://access.redhat.com/errata/RHSA-2026:20612
- https://access.redhat.com/errata/RHSA-2026:20613
- https://access.redhat.com/errata/RHSA-2026:26319
- https://access.redhat.com/errata/RHSA-2026:26409
- https://access.redhat.com/errata/RHSA-2026:29197
- https://access.redhat.com/errata/RHSA-2026:29794
- https://access.redhat.com/errata/RHSA-2026:30004
- https://access.redhat.com/errata/RHSA-2026:30849
- https://access.redhat.com/errata/RHSA-2026:30850
- https://access.redhat.com/errata/RHSA-2026:32962
- https://access.redhat.com/errata/RHSA-2026:33125
- https://access.redhat.com/errata/RHSA-2026:34372
- https://access.redhat.com/errata/RHSA-2026:34764
- https://access.redhat.com/errata/RHSA-2026:34788
- https://access.redhat.com/errata/RHSA-2026:36004
- https://access.redhat.com/errata/RHSA-2026:36005
- https://access.redhat.com/errata/RHSA-2026:36006
- https://access.redhat.com/errata/RHSA-2026:40762
- https://access.redhat.com/errata/RHSA-2026:41921
- https://access.redhat.com/errata/RHSA-2026:56786
- https://access.redhat.com/errata/RHSA-2026:56853
- https://access.redhat.com/errata/RHSA-2026:56911
- https://access.redhat.com/errata/RHSA-2026:57483
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:59831
- https://access.redhat.com/errata/RHSA-2026:60019
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-42009
- https://bugzilla.redhat.com/show_bug.cgi?id=2467279
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-2
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42009.json