CVE-2026-3832

LowCVSS 3.7/10Last modified Nov 6, 2026

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-179

Affected software

VendorProductVersions
——< 3.8.13
Red HatRed Hat Enterprise Linux 10—
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—
Red HatRed Hat Enterprise Linux 9—
Red HatRed Hat Enterprise Linux 9—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.17—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.18—
Red HatCert Manager support for Red Hat OpenShift release 1.20—
Red HatRed Hat Discovery 2—
Red HatRed Hat Discovery 2—
Red HatRed Hat Hardened Images—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Update Infrastructure 5—
Red HatRed Hat Enterprise Linux 6—
Red HatRed Hat Enterprise Linux 7—
Red HatRed Hat Enterprise Linux 8—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—
Red HatRed Hat OpenShift Container Platform 4—

References

Timeline

Published
Apr 30, 2026
Last modified
Nov 6, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-383299.8Bludit CMS before version 3.18.4 allows Remote Code Execution (RCE) via the API Plugin. The POST /api/files/{key} endpoint in bl-plugins/apiCVE-2026-38337.4A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifCVE-2026-383322.9TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.CVE-2026-383436.5An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoCVE-2026-383447.5A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to causCVE-2026-383456.5A Division-by-Zero vulnerability in the ff_sws_init_single_context function (/libswscale/utils.c) of FFmpeg N-122528-gdd2976b9e1 allows attaCVE-2026-383467.5An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialCVE-2026-383477.5A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to causCVE-2026-383487.5An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) vCVE-2026-383497.5An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialCVE-2026-38355.3The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insuCVE-2026-383507.5An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Den
CVE-2026-3832: Low severity, CVSS 3.7 | Vulnix