PT-2025-29077 · Gnutls+10 · Gnutls+10

Published 2025-07-08 · Updated 2026-03-29 · CVE-2025-32990

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified)

Description: A heap-buffer-overflow flaw exists in the template parsing logic within the certtool utility. The issue occurs when reading certain settings from a template file, potentially leading to an out-of-bounds NULL pointer write, memory corruption, and a denial-of-service (DoS) condition that could crash the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Double Free

Heap Based Buffer Overflow

NULL Pointer Dereference

Weakness Enumeration

CWE-415

CWE-122

CWE-476

Related Identifiers

ALSA-2025:16115

ALSA-2025:16116

ALSA-2025:17415

ALT-PU-2025-9109

ALT-PU-2025-9160

AZL-65091

AZL-65100

BDU:2025-08694

BDU:2025-11074

BDU:2025-11076

CESA-2025_17415

CVE-2025-32990

DLA-4267-1

DSA-5962-1

INFSA-2025_16116

INFSA-2025_17415

MGASA-2025-0225

OESA-2025-2007

OESA-2025-2008

OESA-2025-2009

OESA-2025-2010

OESA-2025-2011

OESA-2025-2084

OPENSUSE-SU-2025:15411-1

RHSA-2025:16115

RHSA-2025:16116

RHSA-2025_16116

RHSA-2025_17415

RHSA-2026:7477

SUSE-SU-2025:02340-1

SUSE-SU-2025:02520-1

SUSE-SU-2025:02521-1

SUSE-SU-2025:02583-1

SUSE-SU-2025:02589-1

SUSE-SU-2025:02595-1

SUSE-SU-2025:20563-1

SUSE-SU-2025:20665-1

SUSE-SU-2025_02520-1

SUSE-SU-2025_02521-1

SUSE-SU-2025_02583-1

SUSE-SU-2025_02589-1

SUSE-SU-2025_02595-1

USN-7635-1

USN-7742-1

Affected Products

Alt Linux

Almalinux

Centos

Debian

Gnutls

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 138

• https://osv.dev/vulnerability/SUSE-SU-2025:02340-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:17415 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:16116 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11074 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02521-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-32990 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7635-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:17348 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-32990 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7635-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5962-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2026-0421SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-32989 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20563-1 · Vendor Advisory