CVE-2026-42015

Published: May 26, 2026

Modified: Jun 2, 2026

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.

Vendor	Product	Versions
Red Hat	Red Hat Enterprise Linux 10	unaffected `0:3.8.10-4.el10_2 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:3.6.16-8.el8_10.6 - < *`
Red Hat	Red Hat Enterprise Linux 8	unaffected `0:3.6.16-8.el8_10.6 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:3.8.10-4.el9_8 - < *`
Red Hat	Red Hat Enterprise Linux 9	unaffected `0:3.8.10-4.el9_8 - < *`
Red Hat	Red Hat Enterprise Linux 6	All versions
Red Hat	Red Hat Enterprise Linux 7	All versions
Red Hat	Red Hat Hardened Images	All versions
Red Hat	Red Hat OpenShift Container Platform 4	All versions