Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-6395

Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

libgnutls

Default version status: unaffected

  • 0 to < 3.8.10affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:3.8.9-9.el10_0.14 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.6.16-8.el8_10.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.6.16-8.el8_10.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.8.3-6.el9_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.8.3-6.el9_6.2 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Default version status: affected

  • 0:3.7.6-21.el9_2.4 to < *unaffected

Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support

Default version status: affected

  • 0:3.8.3-4.el9_4.4 to < *unaffected

Red Hat Red Hat Ceph Storage 7

Default version status: affected

  • 7 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 2.3.0-1760554384 to < *unaffected

Red Hat Red Hat Insights proxy 1.5

Default version status: affected

  • 1.5.7-1759331989 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References