Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-42012

Опубликовано: 01 июн. 2026
Источник: msrc
CVSS3: 7.1
EPSS Низкий

Описание

Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans

EPSS

Процентиль: 28%
0.00354
Низкий

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 7.1
ubuntu
2 месяца назад

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.

CVSS3: 7.1
redhat
3 месяца назад

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.

CVSS3: 7.1
nvd
2 месяца назад

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information.

CVSS3: 7.1
debian
2 месяца назад

A flaw was found in gnutls. A remote attacker could exploit this vulne ...

CVSS3: 7.1
redos
около 1 месяца назад

Уязвимость gnutls

EPSS

Процентиль: 28%
0.00354
Низкий

7.1 High

CVSS3