Vulnerabilities

TI-2025-05796 CVE-2025-6395 · GHSA-prf7-7jvx-hxj5

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

LOW 30

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00771 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +7 CWE-476

TI-2025-24000 CVE-2025-32990 · GHSA-v8v5-8mm8-3j8p

MEDIUM 43

A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00896 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-122

TI-2025-23998 CVE-2025-32988 · GHSA-fv5h-vqpf-6fqj

LOW 39

A flaw was found in GnuTLS.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01475 Published 2025-07-10 Partial fix · 3.8.10, 3.8.9-9.el10_0.14 +8 CWE-415