A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
26 Oct 2026, 13:10
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
14 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
02 Oct 2026, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Sep 2026, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
18 Sep 2026, 13:18
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2026:65839 - |
17 Sep 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2026-05-18 13:16
Updated : 2026-10-30 17:17
NVD link : CVE-2026-42009
Mitre link : CVE-2026-42009
CVE.ORG link : CVE-2026-42009
JSON object : View
Products Affected
redhat
- enterprise_linux_for_ibm_z_systems
- enterprise_linux_for_power_little_endian_eus
- openshift_container_platform
- enterprise_linux_for_power_little_endian_els
- enterprise_linux_for_ibm_z_systems_els
- hardened_images
- enterprise_linux_for_eus
- enterprise_linux
- enterprise_linux_for_ibm_z_systems_eus
- enterprise_linux_for_update_services_for_sap_solutions
- enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions
- enterprise_linux_for_els
- enterprise_linux_for_power_little_endian
gnu
- gnutls
CWE
CWE-475
Undefined Behavior for Input to API
