Skip to content
CVE PROGRAM SOURCE RECORD4.0 Medium

CVE-2025-9820

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

gnutls

  • 3.8.1affected
  • 3.8.2affected
  • 3.8.3affected
  • 3.8.4affected
  • 3.8.5affected
  • 3.8.6affected
  • 3.8.7affected
  • 3.8.8affected
  • 3.8.9affected
  • 3.8.10affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:3.8.10-3.el10_1 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.6.16-8.el8_10.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:3.6.16-8.el8_10.5 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.8.3-10.el9_7 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:3.8.3-10.el9_7 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1777325677 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1777325711 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1777325710 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-3.1777325680 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1777325709 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1777325680 to < *unaffected

Red Hat RHEL-8 based Middleware Containers

Default version status: affected

  • 7.13.5-4.1777325708 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459707 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459711 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791459759 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1789029076 to < *unaffected

Red Hat Cert Manager support for Red Hat OpenShift release 1.18

Default version status: affected

  • 1791966259 to < *unaffected

Red Hat Red Hat Ceph Storage 8

Default version status: affected

  • 1774002867 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 1775668717 to < *unaffected

Red Hat Red Hat Discovery 2

Default version status: affected

  • 1775675922 to < *unaffected

Red Hat Red Hat Hardened Images

Default version status: affected

  • 3.8.12-1.1.hum1 to < *unaffected

Red Hat Red Hat Insights proxy 1.5

Default version status: affected

  • 1773685509 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773670073 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773672059 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773668803 to < *unaffected

Red Hat Red Hat Update Infrastructure 5

Default version status: affected

  • 1773670137 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: affected

Red Hat Red Hat Enterprise Linux 7

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: affected

References