CVE-2026-3832

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Apr 30, 2026
Source updated: Oct 14, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly accept a revoked server certificate, potentially leading to a compromise of trust.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

gnutls

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: unaffected
Package: gnutls
Package collection: https://gitlab.com/gnutls/gnutls

gnutls · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	3.8.13	Unavailable	None listed

Red Hat Enterprise Linux 10

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.10-4.el10_2	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 10.0 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10.0 Extended Update Support
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10.0 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.9-9.el10_0.19	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.10-4.el9_8	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: gnutls
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.8.10-4.el9_8	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.17

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.17
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-acmesolver-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791371080	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.17

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.17
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791371069	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.17

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.17
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791788287	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.17

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.17
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-bundle
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791970484	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-acmesolver-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459707	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459711	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-istio-csr-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459759	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1789029076	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-bundle
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791966259	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.20

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.20
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-trust-manager-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.20 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1790598593	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Discovery 2

Vendor: Red Hat
Product: Red Hat Discovery 2
Platforms: Unknown
Default status: affected
Package: discovery/discovery-server-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Discovery 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1782159791	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Discovery 2

Vendor: Red Hat
Product: Red Hat Discovery 2
Platforms: Unknown
Default status: affected
Package: discovery/discovery-ui-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Discovery 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1782166952	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Hardened Images

Vendor: Red Hat
Product: Red Hat Hardened Images
Platforms: Unknown
Default status: affected
Package: gnutls-main
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Hardened Images · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.8.13-1.hum1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/cds-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1781525684	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/haproxy-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1781525671	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/installer-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1781525693	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/rhua-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1781525739	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/cds-kubernetes-tp-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787241211	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/installer-tp-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787135742	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/rhua-tp-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1787241260	`unaffected`	rpm	*	Unavailable	None listed