PT-2025-29106 · Gnutls+10 · Gnutls+10

Published 2025-07-08 · Updated 2026-03-29 · CVE-2025-6395

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified)

Description: A flaw exists in GnuTLS within the gnutls figure common ciphersuite() function. Reading specific settings from a template file can lead to an out-of-bounds NULL pointer write, causing memory corruption and a potential denial of service (DoS) that may crash the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025:16115

ALSA-2025:16116

ALSA-2025:17415

ALT-PU-2025-9109

ALT-PU-2025-9160

AZL-65154

AZL-65193

BDU:2025-08694

CESA-2025_17415

CVE-2025-6395

DLA-4267-1

DSA-5962-1

INFSA-2025_16116

INFSA-2025_17415

MGASA-2025-0225

OESA-2025-2007

OESA-2025-2008

OESA-2025-2009

OESA-2025-2010

OESA-2025-2011

OESA-2025-2084

OPENSUSE-SU-2025:15411-1

RHSA-2025:16115

RHSA-2025:16116

RHSA-2025_16116

RHSA-2025_17415

SUSE-SU-2025:02340-1

SUSE-SU-2025:02583-1

SUSE-SU-2025:02589-1

SUSE-SU-2025:02595-1

SUSE-SU-2025:20563-1

SUSE-SU-2025:20665-1

SUSE-SU-2025_02583-1

SUSE-SU-2025_02589-1

SUSE-SU-2025_02595-1

USN-7635-1

USN-7742-1

Affected Products

Alt Linux

Almalinux

Centos

Debian

Gnutls

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 125

• https://bdu.fstec.ru/vul/2025-08694 · Security Note
• https://osv.dev/vulnerability/MGASA-2025-0225 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-ALPINE-322-CVE-2025-6395 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:17415 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-32988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-32988 · Security Note
• https://access.redhat.com/errata/RHSA-2025:16116 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-32989 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7635-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2010 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:17348 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6395 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02589-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-6395 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02583-1 · Vendor Advisory