Fluid Attacks Database

Description

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 13	gnutls28	=3.8.9-3 \|\| =3.8.9-3+deb13u1 \|\| =3.8.9-3+deb13u2 \|\| =3.8.9-3+deb13u3 \|\| >=0 <3.8.9-3+deb13u4	3.8.9-3+deb13u4
debian 14	gnutls28	=3.8.10-1 \|\| =3.8.10-2 \|\| =3.8.10-3 \|\| =3.8.11-1 \|\| =3.8.11-2 \|\| =3.8.11-3 \|\| =3.8.12-1 \|\| =3.8.12-2 \|\| =3.8.12-3 \|\| =3.8.12-4 \|\| =3.8.9-3 \|\| >=0 <3.8.13-1	3.8.13-1
rpm rhel10	gnutls	<0:3.8.10-4.el10_2	0:3.8.10-4.el10_2
rpm rhel9	gnutls	<0:3.8.10-4.el9_8	0:3.8.10-4.el9_8
alpine v3.22	gnutls	>=0 <3.8.13-r0	3.8.13-r0
alpine v3.23	gnutls	>=0 <3.8.13-r0	3.8.13-r0
alpine v3.20	gnutls	>=0 <3.8.13-r0	3.8.13-r0
alpine v3.24	gnutls	>=0 <3.8.13-r0	3.8.13-r0
rpm rhel10.0	gnutls	<0:3.8.9-9.el10_0.19	0:3.8.9-9.el10_0.19
rpm rhel8	gnutls	-	-

1-10 of 11

Aliases

1. CVE-2026-38322. NVD-2026-38323. OSV-DEBIAN-2026-38324. OSV-2026-38325. OSV-ALPINE-2026-38326. SECURITY-TRACKER-CVE-2026-38327. SECURITY-CVE-2026-3832

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.