8.2

CVE-2026-42013

Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Collection URLhttps://gitlab.com/gnutls/gnutls
≫
Paket gnutls
Version 0
Status affected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 10
Default Statusaffected
Version 0:3.8.10-4.el10_2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 10.0 Extended Update Support
Default Statusaffected
Version 0:3.8.9-9.el10_0.19
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 7 Extended Lifecycle Support
Default Statusaffected
Version 0:3.3.29-9.el7_9.2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8
Default Statusaffected
Version 0:3.6.16-8.el8_10.6
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8
Default Statusaffected
Version 0:3.6.16-8.el8_10.6
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Default Statusaffected
Version 0:3.6.14-10.el8_4.1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Default Statusaffected
Version 0:4.13-3.el8_4.1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Default Statusaffected
Version 0:3.6.14-10.el8_4.1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Default Statusaffected
Version 0:4.13-3.el8_4.1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Default Statusaffected
Version 0:3.6.16-5.el8_6.5
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Default Statusaffected
Version 0:4.13-3.el8_6.2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Default Statusaffected
Version 0:3.6.16-5.el8_6.5
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Default Statusaffected
Version 0:4.13-3.el8_6.2
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Default Statusaffected
Version 0:3.6.16-7.el8_8.4
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Default Statusaffected
Version 0:4.13-4.el8_8.1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Default Statusaffected
Version 0:3.6.16-7.el8_8.4
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Default Statusaffected
Version 0:4.13-4.el8_8.1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9
Default Statusaffected
Version 0:3.8.10-4.el9_8
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9
Default Statusaffected
Version 0:3.8.10-4.el9_8
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Default Statusaffected
Version 0:3.7.6-21.el9_2.7
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Default Statusaffected
Version 0:3.8.3-4.el9_4.6
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 9.6 Extended Update Support
Default Statusaffected
Version 0:3.8.3-6.el9_6.4
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4.12
Default Statusaffected
Version 412.86.202608241157-0
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4.16
Default Statusaffected
Version 416.94.202608150307-0
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4.17
Default Statusaffected
Version 417.94.202608250221-0
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4.18
Default Statusaffected
Version 418.94.202608142238-0
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4.19
Default Statusaffected
Version 4.19.9.6.202607151909-0
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Cert Manager support for Red Hat OpenShift release 1.20
Default Statusaffected
Version 1790598593
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Discovery 2
Default Statusaffected
Version 1782159791
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Discovery 2
Default Statusaffected
Version 1782166952
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Hardened Images
Default Statusaffected
Version 3.8.13-1.hum1
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat OpenShift AI 3.4
Default Statusaffected
Version 1790703542
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1781525684
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1781525671
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1781525693
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1781525739
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1787241211
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1787135742
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Update Infrastructure 5
Default Statusaffected
Version 1787241260
Version < *
Status unaffected
HerstellerRed Hat
≫
Produkt Red Hat Enterprise Linux 6
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4
Default Statusunknown
HerstellerRed Hat
≫
Produkt Red Hat OpenShift Container Platform 4
Default Statusaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.42% 0.339
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 8.2 3.9 4.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

https://bugzilla.redhat.com/show_bug.cgi?id=2467448
https://access.redhat.com/errata/RHSA-2026:13274
https://access.redhat.com/errata/RHSA-2026:20611
https://access.redhat.com/errata/RHSA-2026:20612
https://access.redhat.com/errata/RHSA-2026:20613
https://access.redhat.com/errata/RHSA-2026:26319
https://access.redhat.com/errata/RHSA-2026:26409
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30004
https://access.redhat.com/errata/RHSA-2026:30849
https://access.redhat.com/errata/RHSA-2026:30850
https://access.redhat.com/errata/RHSA-2026:32962
https://access.redhat.com/errata/RHSA-2026:33125
https://access.redhat.com/security/cve/CVE-2026-42013
https://www.gnutls.org/security-new.html#GNUTLS-SA-2026-04-29-8
https://access.redhat.com/errata/RHSA-2026:41921
https://access.redhat.com/errata/RHSA-2026:40762
https://access.redhat.com/errata/RHSA-2026:43575
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:57483
https://access.redhat.com/errata/RHSA-2026:56853
https://access.redhat.com/errata/RHSA-2026:59831
https://access.redhat.com/errata/RHSA-2026:60019
https://access.redhat.com/errata/RHSA-2026:72502
https://access.redhat.com/errata/RHSA-2026:74674