Skip to content
Threat Feed

Tag

Cve-2026-1584

1 brief RSS
high advisory

GNUTLS Denial of Service via Malformed ClientHello (CVE-2026-1584)

A remote, unauthenticated attacker can exploit CVE-2026-1584 in gnutls by sending a specially crafted ClientHello message with an invalid Pre-Shared Key (PSK) binder value during the TLS handshake, leading to a NULL pointer dereference and a denial-of-service condition.

cve-2026-1584 denial-of-service gnutls
2r 2t 1c