PT-2025-47801 · Fedora+7 · Fedora+7

CVE-2025-9820 · Published 2025-01-01 · Updated 2026-07-06

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GnuTLS versions 15.0 and -current GnuTLS versions prior to Fedora 43

Description A stack overflow issue exists in GnuTLS. The issue is related to a flaw that could potentially allow for malicious exploitation.

Recommendations Update GnuTLS to the latest version available for Slackware 15.0 and -current. Update GnuTLS on Fedora 43 to the latest available version.

Exploit

Fix

DoS

LPE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

ALSA-2026:3477

ALSA-2026:4188

ALSA-2026:5585

AZL-75258

AZL-75261

BDU:2025-15388

CVE-2025-9820

ECHO-AB0E-9DDF-13E5

MGASA-2025-0317

OESA-2026-1043

OESA-2026-1044

OESA-2026-1045

OESA-2026-1046

OPENSUSE-SU-2025:15765-1

OPENSUSE-SU-2026:20446-1

RHSA-2026:3477

RHSA-2026:4188

RHSA-2026:5585

RHSA-2026:7477

SUSE-SU-2025:21202-1

SUSE-SU-2025:21222-1

SUSE-SU-2025:4271-1

SUSE-SU-2025:4272-1

SUSE-SU-2025:4323-1

SUSE-SU-2025:4346-1

SUSE-SU-2025:4525-1

SUSE-SU-2025_4323-1

SUSE-SU-2025_4346-1

SUSE-SU-2026:20962-1

SUSE-SU-2026:20968-1

SUSE-SU-2026:20984-1

SUSE-SU-2026:2367-1

USN-8043-1

USN-8502-1

Affected Products

Debian

Fedora

Gnutls

Linuxmint

Red Os

Rocky Linux

Slackware

Ubuntu

References · 133

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9820.json · Exploit
• https://access.redhat.com/errata/RHSA-2026:5606 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:5585 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:7329 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-9820 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:4188 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:5585 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:4188 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1043 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-9820 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-9820 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0305SE38 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:4943 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/KETTG4V5TV3CDZVJRFFLIAEJ5R66OCR7 · Vendor Advisory