A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-gnutlsalma-upgrade-gnutls-c++alma-upgrade-gnutls-danealma-upgrade-gnutls-develalma-upgrade-gnutls-utils | May 13, 2025 | Feb 10, 2025 | |
| Alpine Linux | alpine-linux-upgrade-gnutls | Feb 24, 2026 | Feb 10, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-gnutlsamazon-linux-ami-2-upgrade-gnutls-camazon-linux-ami-2-upgrade-gnutls-daneamazon-linux-ami-2-upgrade-gnutls-debuginfoamazon-linux-ami-2-upgrade-gnutls-develamazon-linux-ami-2-upgrade-gnutls-utils | Jun 13, 2025 | Feb 10, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-gnutlsamazon-linux-2023-upgrade-gnutls-camazon-linux-2023-upgrade-gnutls-c-debuginfoamazon-linux-2023-upgrade-gnutls-daneamazon-linux-2023-upgrade-gnutls-dane-debuginfoamazon-linux-2023-upgrade-gnutls-debuginfoamazon-linux-2023-upgrade-gnutls-debugsourceamazon-linux-2023-upgrade-gnutls-develamazon-linux-2023-upgrade-gnutls-utilsamazon-linux-2023-upgrade-gnutls-utils-debuginfo | May 14, 2025 | Feb 10, 2025 | |
| Debian | debian-upgrade-gnutls28 | Feb 20, 2025 | Feb 10, 2025 | |
| Dell Powerstore Dsa2025342 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Sep 2, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-gnutls | Sep 18, 2025 | Sep 17, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-gnutlshuawei-euleros-2_0_sp10-upgrade-gnutls-utils | Sep 15, 2025 | Jul 24, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-gnutlshuawei-euleros-2_0_sp11-upgrade-gnutls-utils | Apr 11, 2025 | Feb 10, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-gnutlshuawei-euleros-2_0_sp12-upgrade-gnutls-utils | May 7, 2025 | Feb 10, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-gnutlshuawei-euleros-2_0_sp13-upgrade-gnutls-utils | Jun 11, 2025 | Feb 10, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Aug 22, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-gnutlsoracle-linux-upgrade-gnutls-coracle-linux-upgrade-gnutls-daneoracle-linux-upgrade-gnutls-develoracle-linux-upgrade-gnutls-utils | Apr 25, 2025 | Feb 10, 2025 |
| Redhat_linux | redhat-upgrade-gnutlsredhat-upgrade-gnutls-credhat-upgrade-gnutls-c-debuginforedhat-upgrade-gnutls-daneredhat-upgrade-gnutls-dane-debuginforedhat-upgrade-gnutls-debuginforedhat-upgrade-gnutls-debugsourceredhat-upgrade-gnutls-develredhat-upgrade-gnutls-utilsredhat-upgrade-gnutls-utils-debuginfo | Apr 24, 2025 | Feb 10, 2025 | |
| Rocky_linux | rocky-upgrade-gnutlsrocky-upgrade-gnutls-c++rocky-upgrade-gnutls-c++-debuginforocky-upgrade-gnutls-danerocky-upgrade-gnutls-dane-debuginforocky-upgrade-gnutls-debuginforocky-upgrade-gnutls-debugsourcerocky-upgrade-gnutls-develrocky-upgrade-gnutls-utilsrocky-upgrade-gnutls-utils-debuginfo | Jul 31, 2025 | Jul 29, 2025 | |
| Suse | — | suse-upgrade-gnutlssuse-upgrade-libgnutls-develsuse-upgrade-libgnutls-devel-32bitsuse-upgrade-libgnutls-openssl-develsuse-upgrade-libgnutls-openssl27suse-upgrade-libgnutls28suse-upgrade-libgnutls28-32bitsuse-upgrade-libgnutls30suse-upgrade-libgnutls30-32bitsuse-upgrade-libgnutlsxx-develsuse-upgrade-libgnutlsxx30 | Dec 5, 2025 | Apr 23, 2025 |
| Ubuntu | ubuntu-upgrade-libgnutls30ubuntu-upgrade-libgnutls30t64 | Feb 21, 2025 | Feb 10, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub