CVE-2026-42010 — A flaw was found in gnutls. Servers configured with...
CVE-2026-42010 漏洞深度分析
漏洞概述
CVE 编号： CVE-2026-42010
CVSS 评分： 7.1（HIGH）
CVSS 向量： CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CWE 分类： CWE-170,CWE-626,CWE-170
漏洞状态： Modified
发布时间： 2026-05-07T12:16:17.977
最后更新： 2026-07-14T12:17:04.397
漏洞描述
A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key) wrongfully matched usernames containing a NUL character with truncated usernames. A remote attacker could exploit this by sending a specially crafted username, leading to an authentication bypass. This vulnerability allows an attacker to gain unauthorized access by circumventing the authentication process.
影响分析
此漏洞的具体影响取决于实际利用场景。"
修复建议
- 及时关注厂商发布的安全更新和补丁
- 升级受影响组件到最新版本
- 如无法立即升级，参考厂商提供的临时缓解措施
- 加强网络访问控制和监控
参考链接
💬 评论