Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2025-9820

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

En bref

Sévérité
MEDIUM 4.0
EPSS
EPSS 0.22 % · centile 13 (2026-10-27)
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
redhat
Statut NVD
Deferred

Description

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1MEDIUM 4.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lredhat
CVSS 3.1MEDIUM 4.0CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LNVD · secalert@redhat.com (Secondary)

Faiblesses (CWE)

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
gnutlsaffected 3.8.1 ; affected 3.8.2 ; affected 3.8.3 ; affected 3.8.4 ; affected 3.8.5 ; affected 3.8.6
Red Hat · Red Hat Enterprise Linux 10unaffected 0:3.8.10-3.el10_1 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 0:3.6.16-8.el8_10.5 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 0:3.6.16-8.el8_10.5 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 0:3.8.3-10.el9_7 < *
Red Hat · Red Hat Enterprise Linux 9unaffected 0:3.8.3-10.el9_7 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325677 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325711 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325710 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-3.1777325680 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325709 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325680 < *
Red Hat · RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325708 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 < *
Red Hat · Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 < *
Red Hat · Red Hat Ceph Storage 8unaffected 1774002867 < *
Red Hat · Red Hat Discovery 2unaffected 1775668717 < *

Références

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD