Read the docs
TI-2023-11094 Aliases CVE-2023-25824

mod_gnutls contains Infinite Loop on request read timeout

Priority HIGH 72CWE-835Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-835.

Summary

Mod_gnutls is a TLS module for Apache HTTPD based on GnuTLS. Versions from 0.9.0 to 0.12.0 (including) did not properly fail blocking read operations on TLS connections when the transport hit timeouts. Instead it entered an endless loop retrying the read operation, consuming CPU resources. This could be exploited for denial of service attacks. If trace level logging was enabled, it would also produce an excessive amount of log output during the loop, consuming disk space. The problem has been fixed in commit d7eec4e598158ab6a98bf505354e84352f9715ec, please update to version 0.12.1. There are no workarounds, users who cannot update should apply the errno fix detailed in the security advisory.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01091 65th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed mod_gnutls (airtower-luna): 0.12.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
airtower-lunamod_gnutls0.9.0 to before 0.12.10.12.1Patch availableCNA
  • mod_gnutls Vendorairtower-luna Affected 0.9.0 to before 0.12.1 Fixed in 0.12.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mod_gnutls_project:mod_gnutls:*:*:*:*:*:*:*:*0.9.0 to before 0.12.1Vulnerableairtower-luna
  • cpe:2.3:a:mod_gnutls_project:mod_gnutls:*:*:*:*:*:*:*:* Versions 0.9.0 to before 0.12.1 Vulnerable ·airtower-luna

Remediation

  • Fix · CNA mod_gnutls (airtower-luna) Fixed in 0.12.1

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-25824

References

Exploit 1

Patch 2

  • TI-2026-25718 mod_gnutils has stack-based buffer overflow caused by a long client certificate chain CVSS 3.1HIGH 7.5
  • TI-2009-04890 mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set… CVSS 3.0HIGH 7.5
  • TI-2026-25719 mod_gnutls missing key purpose check in client certificate verification CVSS 3.1MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences