Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-5260

Опубликовано: 01 июн. 2026
Источник: msrc
CVSS3: 8.2
EPSS Низкий

Описание

Gnutls: gnutls: information disclosure via heap overread in rsa key exchange

EPSS

Процентиль: 51%
0.00727
Низкий

8.2 High

CVSS3

Связанные уязвимости

CVSS3: 8.2
ubuntu
2 месяца назад

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.

CVSS3: 8.2
redhat
3 месяца назад

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.

CVSS3: 8.2
nvd
2 месяца назад

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.

CVSS3: 8.2
debian
2 месяца назад

A flaw was found in libgnutls. A remote attacker, by sending an extrem ...

CVSS3: 8.2
github
2 месяца назад

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.

EPSS

Процентиль: 51%
0.00727
Низкий

8.2 High

CVSS3