PT-2025-29077 · Gnutls+10 · Gnutls+10

CVE-2025-32990 · Publicado 2025-07-08 · Atualizado 2026-06-30

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified)

Description: A heap-buffer-overflow flaw exists in the template parsing logic within the certtool utility. The issue occurs when reading certain settings from a template file, potentially leading to an out-of-bounds NULL pointer write, memory corruption, and a denial-of-service (DoS) condition that could crash the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Double Free

Heap Based Buffer Overflow

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-415

CWE-122

CWE-476

Identificadores relacionados

ALSA-2025:16115

ALSA-2025:16116

ALSA-2025:17415

ALT-PU-2025-9109

ALT-PU-2025-9160

AZL-65091

AZL-65100

BDU:2025-08694

BDU:2025-11074

BDU:2025-11076

CESA-2025_17415

CVE-2025-32990

DLA-4267-1

DSA-5962-1

INFSA-2025_16116

INFSA-2025_17415

MGASA-2025-0225

OESA-2025-2007

OESA-2025-2008

OESA-2025-2009

OESA-2025-2010

OESA-2025-2011

OESA-2025-2084

OPENSUSE-SU-2025:15411-1

RHSA-2025:16115

RHSA-2025:16116

RHSA-2025_16116

RHSA-2025_17415

RHSA-2026:7477

SUSE-SU-2025:02340-1

SUSE-SU-2025:02520-1

SUSE-SU-2025:02521-1

SUSE-SU-2025:02583-1

SUSE-SU-2025:02589-1

SUSE-SU-2025:02595-1

SUSE-SU-2025:20563-1

SUSE-SU-2025:20665-1

SUSE-SU-2025_02520-1

SUSE-SU-2025_02521-1

SUSE-SU-2025_02583-1

SUSE-SU-2025_02589-1

SUSE-SU-2025_02595-1

USN-7635-1

USN-7742-1

Produtos afetados

Alt Linux

Almalinux

Centos

Debian

Gnutls

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

Referências · 141

• https://osv.dev/vulnerability/ROOT-OS-ALPINE-322-CVE-2025-32990 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=2359620 · Nota
• https://steamdeckhq.com/steamos-3-7-15-beta-released · Publicação no Reddit
• https://t.me/cveNotify/144468 · Publicação no Telegram
• https://errata.almalinux.org/9/ALSA-2025-16116.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2025:20563-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2025:17181 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-32989 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-6395 · Nota de Segurança
• https://osv.dev/vulnerability/OESA-2025-2009 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2025:20665-1 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2025:19088 · Aviso do Fabricante
• https://abf.rosa.ru/advisories/ROSA-SA-2025-3040 · Nota
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-32990 · Aviso do Fabricante