A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to increased resource consumption. This flaw allows a remote attacker to send a specially crafted certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gnutls-daneUpgrade gnutls-c++Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-devel | May 13, 2025 | Feb 10, 2025 |
| Alpine Linux | — | Upgrade gnutls | Feb 24, 2026 | Feb 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade gnutls-utilsUpgrade gnutls-debuginfoUpgrade gnutls-develUpgrade gnutls-c++Upgrade gnutlsUpgrade gnutls-dane | Jun 13, 2025 | Feb 10, 2025 |
| Amazon_linux_2023 | — | Upgrade gnutls-c++Upgrade gnutls-dane-debuginfoUpgrade gnutls-utilsUpgrade gnutls-debugsourceUpgrade gnutlsUpgrade gnutls-c++-debuginfoUpgrade gnutls-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-develUpgrade gnutls-dane | May 14, 2025 | Feb 10, 2025 |
| Debian | — | Upgrade gnutls28 | Feb 20, 2025 | Feb 10, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Gentoo Linux | — | Upgrade net-libs/gnutls. | Sep 18, 2025 | Sep 17, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade gnutls-utilsUpgrade gnutls | Sep 15, 2025 | Jul 24, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade gnutls-utilsUpgrade gnutls | Apr 11, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade gnutlsUpgrade gnutls-utils | May 7, 2025 | Feb 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade gnutls-utilsUpgrade gnutls | Jun 11, 2025 | Feb 10, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 22, 2025 |
| Oracle_linux | — | Upgrade gnutls-utilsUpgrade gnutlsUpgrade gnutls-c++Upgrade gnutls-daneUpgrade gnutls-devel | Apr 25, 2025 | Feb 10, 2025 |
| Redhat_linux | — | Upgrade gnutls-debugsourceUpgrade gnutls-debuginfoUpgrade gnutls-dane-debuginfoUpgrade gnutls-c++Upgrade gnutls-develUpgrade gnutls-utils-debuginfoUpgrade gnutlsUpgrade gnutls-utilsUpgrade gnutls-daneNo solution existsUpgrade gnutls-c++-debuginfo | Apr 24, 2025 | Feb 10, 2025 |
| Rocky_linux | — | Upgrade gnutls-c++-debuginfoUpgrade gnutls-daneUpgrade gnutlsUpgrade gnutls-debuginfoUpgrade gnutls-develUpgrade gnutls-dane-debuginfoUpgrade gnutls-utils-debuginfoUpgrade gnutls-debugsourceUpgrade gnutls-c++Upgrade gnutls-utils | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade libgnutlsxx-develUpgrade libgnutls28Upgrade libgnutls-develUpgrade libgnutls28-32bitUpgrade libgnutlsxx30Upgrade libgnutls-openssl27Upgrade libgnutls30-32bitUpgrade gnutlsUpgrade libgnutls-devel-32bitUpgrade libgnutls-openssl-develUpgrade libgnutls30 | Dec 5, 2025 | Apr 23, 2025 |
| Ubuntu | — | Upgrade libgnutls30Upgrade libgnutls28-dev (Ubuntu Pro)Upgrade libgnutlsxx28 (Ubuntu Pro)Upgrade libgnutls30 (Ubuntu Pro)Upgrade libgnutls-openssl27 (Ubuntu Pro)Upgrade libgnutls-dane0 (Ubuntu Pro)Upgrade gnutls-bin (Ubuntu Pro)Upgrade libgnutls30t64 | Feb 21, 2025 | Feb 10, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub