AIKIDO-2026-10210

gnutls.gnutls is vulnerable to Denial of Service (DoS)

Denial of Service (DoS)CVE-2026-1584 Published Feb 21, 2026

Low Risk

This Affects:

gnutls.gnutls

0.0.1 - 3.8.11

Fixed in 3.8.12

Are you affected? Scan for Free

TL;DR

A TLS 1.3 resumption attempt with an invalid PSK binder value in ClientHello could lead to a denial of service attack via crashing the server.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

gnutls.gnutls is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 3.8.11.

How to fix this

Upgrade the gnutls.gnutls library to the patch version.

Low Risk

This Affects:

gnutls.gnutls

0.0.1 - 3.8.11

Fixed in 3.8.12

Are you affected? Scan for Free

Links

github.com/gnutls/gnutls/blob/master/NEWS

access.redhat.com/errata/RHSA-2026:7477

access.redhat.com/security/cve/CVE-2026-1584

bugzilla.redhat.com/show_bug.cgi?id=2435258

security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1584.json

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Scan for Free

Book a Demo

Free. No credit card required.

Company

Resources

Industries

Use Cases

Compare

Legal

Connect

hello@aikido.dev

Security

Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X

Keizer Karelstraat 15, 9000, Ghent, Belgium

95 Third St, 2nd Fl, San Francisco, CA 94103, US

Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK

Ghent, Belgium | San Francisco, US