A flaw was found in gnutls.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 9, 2026 · NIST NVD

   Detected

   A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

2. Sep 1, 2026 · NIST NVD

   Updated

   A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the server to crash and resulting in a remote Denial of Service (DoS) condition.

Affected

• cpe gnu/gnutlsversion unspecified
• cpe redhat/hardened imagesversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-1584

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-1584

  A flaw was found in gnutls. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake. This can lead to a NULL pointer dereference, causing the se

  nvd.nist.gov

References

• Reference · access.redhat.com
• Vendor Advisory · access.redhat.com
• Issue Tracking · bugzilla.redhat.com
• Reference · security.access.redhat.com