A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-utilsUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-dane | May 13, 2025 | Feb 10, 2025 |
| Alpine Linux | — | Upgrade gnutls | Feb 24, 2026 | Feb 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gnutlsUpgrade gnutls-develUpgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-utils | Jun 13, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-daneUpgrade gnutls-utils-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-utilsUpgrade gnutls-c++ | May 14, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade gnutls28 | Feb 20, 2025 | Feb 10, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Sep 18, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnutlsUpgrade gnutls-utils | Sep 15, 2025 | Jul 24, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Apr 11, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutls-utilsUpgrade gnutls | May 7, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gnutlsUpgrade gnutls-utils | Jun 11, 2025 | Feb 10, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-daneUpgrade gnutls-develUpgrade gnutls-c++ | Apr 25, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade gnutls-daneUpgrade gnutls-develNo solution existsUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-utilsUpgrade gnutls-debugsourceUpgrade gnutls-c++Upgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfo | Apr 24, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade gnutlsUpgrade gnutls-daneUpgrade gnutls-c++-debuginfoUpgrade gnutls-develUpgrade gnutls-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-utilsUpgrade gnutls-c++Upgrade gnutls-dane-debuginfoUpgrade gnutls-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade gnutlsUpgrade libgnutls-openssl27Upgrade libgnutls30-32bitUpgrade libgnutls30Upgrade libgnutls-devel-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls28Upgrade libgnutls28-32bitUpgrade libgnutlsxx30Upgrade libgnutlsxx-develUpgrade libgnutls-devel | Dec 5, 2025 | Apr 23, 2025 |
| Ubuntu | — | Upgrade libgnutls-dane0 (Ubuntu Pro)Upgrade libgnutls-openssl27 (Ubuntu Pro)Upgrade gnutls-bin (Ubuntu Pro)Upgrade libgnutls30t64Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls30Upgrade libgnutlsxx28 (Ubuntu Pro)Upgrade libgnutls28-dev (Ubuntu Pro) | Feb 21, 2025 | Feb 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub