CVE-2026-42009

CVSS 7.5v3.1pub. 2026-05-18upd. 2026-07-02

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Gnu Gnutls
APP
Gnu
wszystkie wersje
Red Hat Enterprise Linux
OS
Redhat
10.010.26.07.08.09.09.8
Red Hat Enterprise Linux For Els
OS
Redhat
10.28.109.8
Red Hat Enterprise Linux For Eus
OS
Redhat
10.29.8
Red Hat Enterprise Linux For IBM Z Systems
OS
Redhat
10.28.0_s390x9.0_s390x
Red Hat Enterprise Linux For IBM Z Systems Els
OS
Redhat
10.28.109.8
Red Hat Enterprise Linux For IBM Z Systems Eus
OS
Redhat
10.29.8
Red Hat Enterprise Linux For Power Little Endian
OS
Redhat
10.010.28.0_ppc64le9.0_ppc64le
Red Hat Enterprise Linux For Power Little Endian Els
OS
Redhat
10.28.109.8
Red Hat Enterprise Linux For Power Little Endian Eus
OS
Redhat
10.29.8
Red Hat Enterprise Linux For Update Services For Sap Solutions
OS
Redhat
9.8
Red Hat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
OS
Redhat
9.8
Red Hat Hardened Images
APP
Redhat
wszystkie wersje
Red Hat OpenShift Container Platform
APP
Redhat
4.0