A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-c++Upgrade gnutls-develUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-dane | May 13, 2025 | Feb 10, 2025 |
| Alpine Linux | — | Upgrade gnutls | Feb 24, 2026 | Feb 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls-debuginfo | Jun 13, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutls-debugsourceUpgrade gnutls-develUpgrade gnutlsUpgrade gnutls-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutls-dane-debuginfo | May 14, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade gnutls28 | Feb 20, 2025 | Feb 10, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Sep 18, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnutls-utilsUpgrade gnutls | Sep 15, 2025 | Jul 24, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Apr 11, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutlsUpgrade gnutls-utils | May 7, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gnutls-utilsUpgrade gnutls | Jun 11, 2025 | Feb 10, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade gnutls-develUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-utilsUpgrade gnutls | Apr 25, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade gnutls-c++-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutlsNo solution existsUpgrade gnutls-develUpgrade gnutls-utilsUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutls-debugsourceUpgrade gnutls-dane-debuginfoUpgrade gnutls-debuginfo | Apr 24, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade gnutls-debuginfoUpgrade gnutls-c++-debuginfoUpgrade gnutlsUpgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-utilsUpgrade gnutls-debugsourceUpgrade gnutls-c++ | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade libgnutls28Upgrade libgnutlsxx-develUpgrade libgnutls28-32bitUpgrade libgnutlsxx30Upgrade libgnutls-develUpgrade libgnutls30-32bitUpgrade libgnutls-openssl27Upgrade libgnutls-openssl-develUpgrade libgnutls30Upgrade libgnutls-devel-32bitUpgrade gnutls | Dec 5, 2025 | Apr 23, 2025 |
| Ubuntu | — | Upgrade gnutls-bin (Ubuntu Pro)Upgrade libgnutls-openssl27 (Ubuntu Pro)Upgrade libgnutls-dane0 (Ubuntu Pro)Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls30t64Upgrade libgnutlsxx28 (Ubuntu Pro)Upgrade libgnutls30Upgrade libgnutls28-dev (Ubuntu Pro) | Feb 21, 2025 | Feb 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub