https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:48:51 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:16115 <p><strong>Affected:</strong> AlmaLinux:10: gnutls, AlmaLinux:10: gnutls-c++, AlmaLinux:10: gnutls-dane, AlmaLinux:10: gnutls-devel, AlmaLinux:10: gnutls-fips, AlmaLinux:10: gnutls-utils</p> <p>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.</p> <p>Security Fix(es):</p> <p>* gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989) * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)</p> <p>Bug Fix(es) and Enhancement(s):</p> <p>* gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620) * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621) * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: gnutls, AlmaLinux:10: gnutls-c++, AlmaLinux:10: gnutls-dane, AlmaLinux:10: gnutls-devel, AlmaLinux:10: gnutls-fips, AlmaLinux:10: gnutls-utils</p> <p>The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS.</p> <p>Security Fix(es):</p> <p>* gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990) * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989) * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)</p> <p>Bug Fix(es) and Enhancement(s):</p> <p>* gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620) * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621) * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622) * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:16115 https://cve.radiocsirt.org/vuln/bdu:2025-11074 bdu:2025-11074 https://cve.radiocsirt.org/vuln/bdu:2025-11074 https://cve.radiocsirt.org/vuln/bell-cve-2025-32990 <p><strong>Affected:</strong> Alpaquita:23: gnutls, Alpaquita:25: gnutls, Alpaquita:stream: gnutls</p> <p><strong>Affected:</strong> Alpaquita:23: gnutls, Alpaquita:25: gnutls, Alpaquita:stream: gnutls</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-32990 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0622 https://cve.radiocsirt.org/vuln/euvd-2026-362230 EUVD-2026-362230 https://cve.radiocsirt.org/vuln/euvd-2026-362230 https://cve.radiocsirt.org/vuln/fkie_cve-2025-32990 <p>A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</p> <p>A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-32990 https://cve.radiocsirt.org/vuln/ghsa-v8v5-8mm8-3j8p <p>A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</p> <p>A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</p> https://cve.radiocsirt.org/vuln/ghsa-v8v5-8mm8-3j8p https://cve.radiocsirt.org/vuln/msrc_cve-2025-32990 msrc_CVE-2025-32990 https://cve.radiocsirt.org/vuln/msrc_cve-2025-32990 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 NCSC-2026-0022 https://cve.radiocsirt.org/vuln/ncsc-2026-0022 https://cve.radiocsirt.org/vuln/oesa-2025-2007 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: gnutls</p> <p>GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code. Security Fix(es):</p> <p>A vulnerability, which was classified as critical, was found in GnuTLS (Network Encryption Software) (affected version unknown).CWE is classifying the issue as CWE-415. The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.This is going to have an impact on confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-32988)</p> <p>GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. There is a security vulnerability in GnuTLS that originates from a heap buffer overflow in the certtool tool template parsing logic, which can lead to memory corruption and denial of service.(CVE-2025-32990)</p> <p>A vulnerability, which was classified as problematic, was found i…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: gnutls</p> <p>GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols as well as APIs to parse and write X.509, PKCS #12, and other required structures. The project strives to provide a secure communications back-end, simple to use and integrated with the rest of the base Linux libraries. A back-end designed to work and be secure out of the box, keeping the complexity of TLS and PKI out of application code. Security Fix(es):</p> <p>A vulnerability, which was classified as critical, was found in GnuTLS (Network Encryption Software) (affected version unknown).CWE is classifying the issue as CWE-415. The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.This is going to have an impact on confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-32988)</p> <p>GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. There is a security vulnerability in GnuTLS that originates from a heap buffer overflow in the certtool tool template parsing logic, which can lead to memory corruption and denial of service.(CVE-2025-32990)</p> <p>A vulnerability, which was classified as problematic, was found i…</p> https://cve.radiocsirt.org/vuln/oesa-2025-2007 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15411-1 <p>gnutls-3.8.10-1.1 on GA media</p> <p>gnutls-3.8.10-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15411-1 https://cve.radiocsirt.org/vuln/rhsa-2025:16115 <p>gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() gnutls: Vulnerability in GnuTLS otherName SAN export gnutls: Vulnerability in GnuTLS SCT extension parsing gnutls: Vulnerability in GnuTLS certtool template parsing</p> <p>gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() gnutls: Vulnerability in GnuTLS otherName SAN export gnutls: Vulnerability in GnuTLS SCT extension parsing gnutls: Vulnerability in GnuTLS certtool template parsing</p> https://cve.radiocsirt.org/vuln/rhsa-2025:16115 https://cve.radiocsirt.org/vuln/suse-su-2025:02340-1 <p>Security update for gnutls</p> <p>Security update for gnutls</p> https://cve.radiocsirt.org/vuln/suse-su-2025:02340-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-32990 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gnutls28, Ubuntu:Pro:18.04:LTS: gnutls28, Ubuntu:Pro:20.04:LTS: gnutls28, Ubuntu:22.04:LTS: gnutls28, Ubuntu:Pro:FIPS-preview:22.04:LTS: gnutls28, Ubuntu:Pro:FIPS-updates:22.04:LTS: gnutls28, Ubuntu:24.04:LTS: gnutls28, Ubuntu:Pro:FIPS-updates:24.04:LTS: gnutls28, Ubuntu:25.10: gnutls28</p> <p>A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: gnutls28, Ubuntu:Pro:18.04:LTS: gnutls28, Ubuntu:Pro:20.04:LTS: gnutls28, Ubuntu:22.04:LTS: gnutls28, Ubuntu:Pro:FIPS-preview:22.04:LTS: gnutls28, Ubuntu:Pro:FIPS-updates:22.04:LTS: gnutls28, Ubuntu:24.04:LTS: gnutls28, Ubuntu:Pro:FIPS-updates:24.04:LTS: gnutls28, Ubuntu:25.10: gnutls28</p> <p>A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-32990 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1526 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1526