A flaw in GnuTLS DTLS handshake parsing permits an attacker to send a malformed DTLS fragment with zero length and a non‑zero offset, which causes an integer underflow during fragment reassembly and results in an out‑of‑bounds read. The vulnerability is remotely exploitable and can lead to an information disclosure or a denial of service by crashing the application or the operating system. It is a classic example of integer underflow (CWE‑191) that undermines memory safety during protocol parsing.

Red Hat Enterprise Linux 6 through 10, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4 are affected. All installations running the included GnuTLS libraries are vulnerable until updated to a version that implements proper bounds checking for DTLS fragments.

The CVSS score of 7.5 classifies this as a high‑severity vulnerability. The likely attack vector is remotely reachable DTLS traffic. Based on the description, it is inferred that attackers can target the DTLS handshake over the network by sending crafted zero‑length fragments with non‑zero offset. The EPSS score of 2% indicates a low but non‑zero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The risk is the potential for denial of service or accidental data leakage if the vulnerable service is exposed to untrusted traffic.