Homepage

Integer Underflow The advisory has been revoked - it doesn't affect any version of package gnutls-utils  (opens in a new tab)

Threat Intelligence

EPSS
2.07% (82nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS6-GNUTLSUTILS-16354414
  • published4 May 2026
  • disclosed30 Apr 2026
Report a new vulnerability Found a mistake?

Introduced: 30 Apr 2026

CVE-2026-33845  (opens in a new tab)
CWE-191  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:6.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gnutls-utils package and not the gnutls-utils package as distributed by Centos.

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

References