A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-dane | May 13, 2025 | Feb 10, 2025 |
| Alpine Linux | — | Upgrade gnutls | Feb 24, 2026 | Feb 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-utils | Jun 13, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-daneUpgrade gnutls-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-dane-debuginfo | May 14, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade gnutls28 | Feb 20, 2025 | Feb 10, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Sep 18, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnutlsUpgrade gnutls-utils | Sep 15, 2025 | Jul 24, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Apr 11, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutls-utilsUpgrade gnutls | May 7, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gnutls-utilsUpgrade gnutls | Jun 11, 2025 | Feb 10, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-utils | Apr 25, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-utilsNo solution existsUpgrade gnutls-utils-debuginfoUpgrade gnutls-develUpgrade gnutls-c++-debuginfo | Apr 24, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade gnutls-debuginfoUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-debugsourceUpgrade gnutls-utils | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade gnutlsUpgrade libgnutls-devel-32bitUpgrade libgnutls30Upgrade libgnutls-openssl27Upgrade libgnutls30-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls28Upgrade libgnutlsxx30Upgrade libgnutls28-32bitUpgrade libgnutls-develUpgrade libgnutlsxx-devel | Dec 5, 2025 | Apr 23, 2025 |
| Ubuntu | — | Upgrade libgnutls30Upgrade libgnutlsxx28 (Ubuntu Pro)Upgrade libgnutls28-dev (Ubuntu Pro)Upgrade libgnutls-openssl27 (Ubuntu Pro)Upgrade libgnutls30 (Ubuntu Pro)Upgrade gnutls-bin (Ubuntu Pro)Upgrade libgnutls30t64Upgrade libgnutls-dane0 (Ubuntu Pro) | Feb 21, 2025 | Feb 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub