Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2026-33846

Improper Handling of Length Parameter Inconsistency

Published: May 04, 2026 | Modified: Jul 20, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 IMPORTANT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33846
CWEhttps://cwe.mitre.org/data/definitions/130.html

A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based solely on handshake type, without validating that the message_length field remains consistent across all fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with conflicting message_length values, causing the implementation to allocate a buffer based on a smaller initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because the merge operation does not enforce proper bounds checking against the allocated buffer size, this results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without authentication via the DTLS handshake path and can lead to application crashes or potential memory corruption.

Weakness

The product parses a formatted message or structure, but it does not handle or incorrectly handles a length field that is inconsistent with the actual length of the associated data.

Affected Software

NameVendorStart VersionEnd Version
Red Hat Enterprise Linux 10RedHatgnutls-0:3.8.10-4.el10_2*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatgnutls-0:3.8.9-9.el10_0.19*
Red Hat Enterprise Linux 7 Extended Lifecycle SupportRedHatgnutls-0:3.3.29-9.el7_9.1*
Red Hat Enterprise Linux 8RedHatgnutls-0:3.6.16-8.el8_10.6*
Red Hat Enterprise Linux 8RedHatgnutls-0:3.6.16-8.el8_10.6*
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRedHatgnutls-0:3.6.14-10.el8_4.1*
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportRedHatlibtasn1-0:4.13-3.el8_4.1*
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRedHatgnutls-0:3.6.14-10.el8_4.1*
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-OnRedHatlibtasn1-0:4.13-3.el8_4.1*
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRedHatgnutls-0:3.6.16-5.el8_6.5*
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportRedHatlibtasn1-0:4.13-3.el8_6.2*
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRedHatgnutls-0:3.6.16-5.el8_6.5*
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-OnRedHatlibtasn1-0:4.13-3.el8_6.2*
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRedHatgnutls-0:3.6.16-7.el8_8.4*
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRedHatlibtasn1-0:4.13-4.el8_8.1*
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRedHatgnutls-0:3.6.16-7.el8_8.4*
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRedHatlibtasn1-0:4.13-4.el8_8.1*
Red Hat Enterprise Linux 9RedHatgnutls-0:3.8.10-4.el9_8*
Red Hat Enterprise Linux 9RedHatgnutls-0:3.8.10-4.el9_8*
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRedHatgnutls-0:3.7.6-21.el9_2.7*
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRedHatgnutls-0:3.8.3-4.el9_4.6*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatgnutls-0:3.8.3-6.el9_6.4*
Red Hat AI Inference Server 3.2RedHatrhaiis/model-opt-cuda-rhel9:1782951051*
Red Hat AI Inference Server 3.2RedHatrhaiis/vllm-cuda-rhel9:1782951012*
Red Hat AI Inference Server 3.2RedHatrhaiis/vllm-rocm-rhel9:1782951244*
Red Hat Discovery 2RedHatdiscovery/discovery-server-rhel9:1782159791*
Red Hat Discovery 2RedHatdiscovery/discovery-ui-rhel9:1782166952*
Red Hat Hardened ImagesRedHatgnutls-main-3.8.13-1.hum1*
Red Hat Update Infrastructure 5RedHatrhui5/cds-rhel9:1781525684*
Red Hat Update Infrastructure 5RedHatrhui5/haproxy-rhel9:1781525671*
Red Hat Update Infrastructure 5RedHatrhui5/installer-rhel9:1781525693*
Red Hat Update Infrastructure 5RedHatrhui5/rhua-rhel9:1781525739*
Gnutls28Ubuntuesm-infra-legacy/xenial*
Gnutls28Ubuntuesm-infra/bionic*
Gnutls28Ubuntuesm-infra/focal*
Gnutls28Ubuntuesm-infra/xenial*
Gnutls28Ubuntufips-preview/jammy*
Gnutls28Ubuntufips-updates/jammy*
Gnutls28Ubuntufips-updates/noble*
Gnutls28Ubuntujammy*
Gnutls28Ubuntunoble*
Gnutls28Ubuntuquesting*
Gnutls28Ubunturesolute*
Gnutls28Ubuntuupstream*

Potential Mitigations

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use