AZL-85983
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-85983.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-85983
- Upstream
- Published
- 2026-04-30T18:16:28Z
- Modified
- 2026-08-28T17:47:37Z
- Summary
- CVE-2026-33845 affecting package gnutls for versions less than 3.8.3-11
- Details
-
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
- References