Red Hat Satellite CVE-2026-12515

Out-of-bounds read in the GnuTLS DTLS handshake reassembly logic lets remote unauthenticated attackers trigger an intege

Information disclosure and denial of service in GnuTLS (libgnutls) let a remote, unauthenticated attacker trigger a heap

Here is the multi-source synthesis as a single JSON object: ```json { "product_name": "GnuTLS", "summary": "Certifi

Local code execution in Poppler's Splash rendering backend allows attackers to compromise applications that open attacke

Heap buffer overflow in libsolv allows local attackers to corrupt memory when a vulnerable application processes a malic

Heap buffer overflow in GNU Binutils XCOFF linker allows arbitrary code execution when a local user processes a maliciou

Denial of service in libarchive's RAR5 reader allows remote attackers to crash applications that decompress untrusted RA

Root command injection in dracut's legacy DHCP path allows adjacent-network attackers to execute arbitrary commands insi

Remote unauthenticated attackers can crash GnuTLS servers by sending malformed TLS handshake messages containing invalid

Heap buffer overflow in GnuTLS DTLS handshake allows remote unauthenticated attackers to crash applications or corrupt m

Certificate name-constraints bypass in GnuTLS allows a remote attacker to craft a leaf certificate whose Subject Alterna

Certificate validation in GnuTLS can be bypassed when a certificate chain contains Certificate Authorities with only exc