Gnutls: gnutls: information disclosure via heap overread in rsa key exchange
Summary
| CVE | CVE-2026-5260 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-05-26 22:16:44 UTC |
| Updated | 2026-08-31 03:16:41 UTC |
| Description | A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure. |
Risk And Classification
Primary CVSS: v3.1 8.2 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS: 0.007270000 probability, percentile 0.515420000 (date 2026-08-27)
Problem Types: CWE-126 | CWE-126 Buffer Over-read
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 8.2 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
| 3.1 | CNA | CVSS | 8.2 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
LowIntegrity
NoneAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat Enterprise Linux 10 | unaffected 0:3.8.10-4.el10_2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | unaffected 0:3.8.9-9.el10_0.19 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:3.6.16-8.el8_10.6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8 | unaffected 0:3.6.16-8.el8_10.6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:3.6.14-10.el8_4.1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:4.13-3.el8_4.1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | unaffected 0:3.6.14-10.el8_4.1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | unaffected 0:4.13-3.el8_4.1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:3.6.16-5.el8_6.5 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:4.13-3.el8_6.2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | unaffected 0:3.6.16-5.el8_6.5 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | unaffected 0:4.13-3.el8_6.2 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:3.6.16-7.el8_8.4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | unaffected 0:4.13-4.el8_8.1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions | unaffected 0:3.6.16-7.el8_8.4 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions | unaffected 0:4.13-4.el8_8.1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:3.8.10-4.el9_8 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9 | unaffected 0:3.8.10-4.el9_8 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions | unaffected 0:3.7.6-21.el9_2.7 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions | unaffected 0:3.8.3-4.el9_4.6 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | unaffected 0:3.8.3-6.el9_6.4 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.16 | unaffected 416.94.202608150307-0 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.18 | unaffected 418.94.202608142238-0 * rpm | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4.19 | unaffected 4.19.9.6.202607151909-0 * rpm | Not specified |
| CNA | Red Hat | Red Hat Discovery 2 | unaffected 1782159791 * rpm | Not specified |
| CNA | Red Hat | Red Hat Discovery 2 | unaffected 1782166952 * rpm | Not specified |
| CNA | Red Hat | Red Hat Hardened Images | unaffected 3.8.13-1.hum1 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1781525684 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1781525671 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1781525693 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1781525739 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1787241211 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1787135742 * rpm | Not specified |
| CNA | Red Hat | Red Hat Update Infrastructure 5 | unaffected 1787241260 * rpm | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 6 | Not specified | Not specified |
| CNA | Red Hat | Red Hat Enterprise Linux 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat OpenShift Container Platform 4 | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:57483 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:29197 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:41921 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:13274 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:56853 | [email protected] | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2026-5260 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:30004 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:33125 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:26319 | [email protected] | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | [email protected] | bugzilla.redhat.com | |
| access.redhat.com/errata/RHSA-2026:32962 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:58981 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:26409 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:30850 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:20612 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:40762 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:20613 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:30849 | [email protected] | access.redhat.com | |
| www.gnutls.org/security-new.html | [email protected] | www.gnutls.org | |
| access.redhat.com/errata/RHSA-2026:20611 | [email protected] | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
CNA: Red Hat would like to thank Joshua Rogers (AISLE Research Team) for reporting this issue. (en)
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-05-06T19:50:31.302Z | Reported to Red Hat. |
| CNA | 2026-04-29T00:00:00.000Z | Made public. |
There are currently no legacy QID mappings associated with this CVE.