Beveiligingsadvies

CVE-2026-5260

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-26 21:29:20
Laatst bijgewerkt 2026-09-03 14:25:01
Toegewezen door redhat
CVSS-score 8.2
Status PUBLISHED

Beschrijving

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure.