CVE-2026-33845

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:13274 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20611
https://access.redhat.com/errata/RHSA-2026:20612
https://access.redhat.com/errata/RHSA-2026:20613
https://access.redhat.com/errata/RHSA-2026:26319
https://access.redhat.com/errata/RHSA-2026:26409
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30004
https://access.redhat.com/errata/RHSA-2026:30849
https://access.redhat.com/errata/RHSA-2026:30850
https://access.redhat.com/errata/RHSA-2026:32962
https://access.redhat.com/errata/RHSA-2026:33125
https://access.redhat.com/errata/RHSA-2026:34372
https://access.redhat.com/errata/RHSA-2026:36004
https://access.redhat.com/errata/RHSA-2026:36005
https://access.redhat.com/errata/RHSA-2026:36006
https://access.redhat.com/errata/RHSA-2026:41921
https://access.redhat.com/errata/RHSA-2026:56786
https://access.redhat.com/errata/RHSA-2026:56853
https://access.redhat.com/errata/RHSA-2026:56911
https://access.redhat.com/errata/RHSA-2026:57402
https://access.redhat.com/errata/RHSA-2026:57483
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:59831
https://access.redhat.com/errata/RHSA-2026:60019
https://access.redhat.com/errata/RHSA-2026:65839
https://access.redhat.com/errata/RHSA-2026:72502
https://access.redhat.com/errata/RHSA-2026:74674
https://access.redhat.com/errata/RHSA-2026:82304
https://access.redhat.com/errata/RHSA-2026:82322
https://access.redhat.com/errata/RHSA-2026:82347
https://access.redhat.com/errata/RHSA-2026:82354
https://access.redhat.com/errata/RHSA-2026:82372
https://access.redhat.com/errata/RHSA-2026:82857
https://access.redhat.com/errata/RHSA-2026:82888
https://access.redhat.com/security/cve/CVE-2026-33845 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450624 Issue Tracking Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13274 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:20611
https://access.redhat.com/errata/RHSA-2026:20612
https://access.redhat.com/errata/RHSA-2026:20613
https://access.redhat.com/errata/RHSA-2026:26319
https://access.redhat.com/errata/RHSA-2026:26409
https://access.redhat.com/errata/RHSA-2026:29197
https://access.redhat.com/errata/RHSA-2026:30004
https://access.redhat.com/errata/RHSA-2026:30849
https://access.redhat.com/errata/RHSA-2026:30850
https://access.redhat.com/errata/RHSA-2026:32962
https://access.redhat.com/errata/RHSA-2026:33125
https://access.redhat.com/errata/RHSA-2026:34372
https://access.redhat.com/errata/RHSA-2026:36004
https://access.redhat.com/errata/RHSA-2026:36005
https://access.redhat.com/errata/RHSA-2026:36006
https://access.redhat.com/errata/RHSA-2026:41921
https://access.redhat.com/errata/RHSA-2026:56786
https://access.redhat.com/errata/RHSA-2026:56853
https://access.redhat.com/errata/RHSA-2026:56911
https://access.redhat.com/errata/RHSA-2026:57402
https://access.redhat.com/errata/RHSA-2026:57483
https://access.redhat.com/errata/RHSA-2026:58981
https://access.redhat.com/errata/RHSA-2026:59831
https://access.redhat.com/errata/RHSA-2026:60019
https://access.redhat.com/errata/RHSA-2026:65839
https://access.redhat.com/security/cve/CVE-2026-33845 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2450624 Issue Tracking Vendor Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33845.json
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnu:gnutls:-:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

History

26 Oct 2026, 22:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad en el análisis del handshake DTLS de GnuTLS permite fragmentos malformados con longitud cero y desplazamiento distinto de cero, lo que lleva a un desbordamiento negativo de enteros durante el reensamblaje y resulta en una lectura fuera de límites. Este problema es explotable remotamente y puede causar revelación de información o denegación de servicio.

14 Oct 2026, 20:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82857 -
  • () https://access.redhat.com/errata/RHSA-2026:82888 -

14 Oct 2026, 03:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82304 -
  • () https://access.redhat.com/errata/RHSA-2026:82322 -
  • () https://access.redhat.com/errata/RHSA-2026:82347 -
  • () https://access.redhat.com/errata/RHSA-2026:82354 -
  • () https://access.redhat.com/errata/RHSA-2026:82372 -

02 Oct 2026, 03:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74674 -

29 Sep 2026, 01:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72502 -

18 Sep 2026, 13:18

Type Values Removed Values Added
References () https://access.redhat.com/errata/RHSA-2026:65839 - () https://access.redhat.com/errata/RHSA-2026:65839 -

17 Sep 2026, 19:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:65839 -

Information

Published : 2026-04-30 18:16

Updated : 2026-10-26 22:10


NVD link : CVE-2026-33845

Mitre link : CVE-2026-33845

CVE.ORG link : CVE-2026-33845


JSON object : View

Products Affected

redhat

  • openshift_container_platform
  • enterprise_linux

gnu

  • gnutls
CWE
CWE-191

Integer Underflow (Wrap or Wraparound)