CVE-2026-3832

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Score
CVSS 3.1 3.7 Low
Status
Modified - secalert@redhat.com
Published
2026-04-30
Last modified
2026-10-26
Weaknesses
CWE-179

Affected products

References

 
 
© AVABIS GmbH privacypolicy about