PT-2026-36154 · Gnutls+3 · Gnutls+3

Osidb Bzimport · Published 2026-02-25 · Updated 2026-06-01 · CVE-2026-3832

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions gnutls (affected versions not specified)

Description A logic error exists in how the software processes multi-record Online Certificate Status Protocol (OCSP) responses—a protocol used to check the revocation status of digital certificates. A remote attacker can exploit this by presenting a specially crafted OCSP response during a TLS handshake, which may cause a client with OCSP verification enabled to incorrectly accept a revoked server certificate, potentially compromising trust.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-179

Related Identifiers

BDU:2026-07115

CVE-2026-3832

ECHO-854E-87BE-FE66

OPENSUSE-SU-2026:10691-1

RHSA-2026:13274

USN-8284-1

Affected Products

Linuxmint

Rocky Linux

Ubuntu

Gnutls

References · 54

• 🔥 https://gitlab.com/gnutls/gnutls/-/issues/1801 · Exploit
• https://ubuntu.com/security/CVE-2026-42013 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-3832 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3832 · Security Note
• https://ubuntu.com/security/CVE-2026-5419 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-3832 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3832 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33846 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8284-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:20612 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-3833 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8284-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-42012 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33845 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:13274 · Vendor Advisory