VDB
RHSA-2026:82354
RHSA-2026:82354
PUBLISHED
CVSS 5.400000095367432 MEDIUM
A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass where a certificate that should be rejected is instead accepted. This could result in unauthorized access or information disclosure.
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:2e099efcf4302ea4d7c3111451321c5e31125a410cd20ab4d31ac06301c1440f_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.18 | * |
| Red Hat | registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a124baaef1fe003ca5f0cff27dacc826bea5ad09af5c53d301d188684dbd0c1e_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.18 | * |
| Red Hat | registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:798462fe0a672104872553f5f5ea2feb4a778075930a2333b092bf5cbf2a107e_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.18 | * |
| Red Hat | registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:852575664b31dfc8c455ae699e6847742c7b0bc819087149e4e632fbaac0b954_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.18 | * |
Timeline
- Oct 13, 2026 CVE Published
- Oct 15, 2026 CVE Updated
- Oct 15, 2026 Distribution Patch
- Oct 15, 2026 Distribution Patch
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
- Oct 15, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:82354 advisory
- https://access.redhat.com/security/cve/CVE-2024-34459 advisory
- https://access.redhat.com/security/cve/CVE-2025-11187 advisory
- https://access.redhat.com/security/cve/CVE-2025-13151 advisory
- https://access.redhat.com/security/cve/CVE-2025-14087 advisory
- https://access.redhat.com/security/cve/CVE-2025-14104 advisory
- https://access.redhat.com/security/cve/CVE-2025-14512 advisory
- https://access.redhat.com/security/cve/CVE-2025-14831 advisory
- https://access.redhat.com/security/cve/CVE-2025-15281 advisory
- https://access.redhat.com/security/cve/CVE-2025-15467 advisory
- https://access.redhat.com/security/cve/CVE-2025-15468 advisory
- https://access.redhat.com/security/cve/CVE-2025-15469 advisory
- https://access.redhat.com/security/cve/CVE-2025-47911 advisory
- https://access.redhat.com/security/cve/CVE-2025-47913 advisory
- https://access.redhat.com/security/cve/CVE-2025-47914 advisory
- https://access.redhat.com/security/cve/CVE-2025-5278 advisory
- https://access.redhat.com/security/cve/CVE-2025-58181 advisory
- https://access.redhat.com/security/cve/CVE-2025-58190 advisory
- https://access.redhat.com/security/cve/CVE-2025-6170 advisory
- https://access.redhat.com/security/cve/CVE-2025-61726 advisory
…and 696 more