Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized certificates.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-107436.json"