A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| red hat | red hat enterprise linux | mitre_affected | 90% |
| red hat | red hat openshift container | mitre_affected | 90% |
| red hat | red hat hardened images | mitre_affected | 90% |
Updated description with more technical detail, changed severity to HIGH, and set CVSS estimate to 7.5.
Initial creation
