AZL-86775
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86775.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-86775
- Upstream
- CVE-2026-42010
- Published
- 2026-05-07T12:16:17Z
- Modified
- 2026-08-28T17:47:59Z
- Summary
- CVE-2026-42010 affecting package gnutls for versions less than 3.8.3-11
- Details
-
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
- References