CVE-2025-9820 — Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Affected: gnutls, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat RHEL-8 based Middleware Containers, Red Hat Cert Manager support for Red Hat OpenShift release 1.18, Red Hat Ceph Storage 8, Red Hat Discovery 2, Red Hat Hardened Images, Red Hat Insights proxy 1.5 and 5 more

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

USN-8043-1 — gnutls28 vulnerabilities

Affected: Ubuntu:22.04:LTS: gnutls28, Ubuntu:24.04:LTS: gnutls28, Ubuntu:25.10: gnutls28

Tim Scheckenbach discovered that GnuTLS incorrectly handled malicious certificates containing a large number of name constraints and subject alternative names. A remote attacker could possibly use this issue to cause GnuTLS to consume resources, resulting in a denial of service. (CVE-2025-14831)

Luigino Camastra discovered that GnuTLS incorrectly handled certain PKCS11 token labels. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (CVE-2025-9820)

Most recent entries from all

CVE-2025-9820 — Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

USN-8043-1 — gnutls28 vulnerabilities