PT-2025-47801 · Fedora+6 · Fedora+6

Published 2025-01-01 · Updated 2026-05-05 · CVE-2025-9820

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GnuTLS versions 15.0 and -current GnuTLS versions prior to Fedora 43

Description A stack overflow issue exists in GnuTLS. The issue is related to a flaw that could potentially allow for malicious exploitation.

Recommendations Update GnuTLS to the latest version available for Slackware 15.0 and -current. Update GnuTLS on Fedora 43 to the latest available version.

Fix

DoS

LPE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

ALSA-2026:3477

ALSA-2026:4188

ALSA-2026:5585

AZL-75258

AZL-75261

BDU:2025-15388

CVE-2025-9820

ECHO-AB0E-9DDF-13E5

MGASA-2025-0317

OESA-2026-1043

OESA-2026-1044

OESA-2026-1045

OESA-2026-1046

OPENSUSE-SU-2025:15765-1

OPENSUSE-SU-2026:20446-1

RHSA-2026:3477

RHSA-2026:4188

RHSA-2026:5585

RHSA-2026:7477

SUSE-SU-2025:21202-1

SUSE-SU-2025:21222-1

SUSE-SU-2025:4271-1

SUSE-SU-2025:4272-1

SUSE-SU-2025:4323-1

SUSE-SU-2025:4346-1

SUSE-SU-2025:4525-1

SUSE-SU-2025_4323-1

SUSE-SU-2025_4346-1

SUSE-SU-2026:20962-1

SUSE-SU-2026:20968-1

SUSE-SU-2026:20984-1

USN-8043-1

Affected Products

Debian

Fedora

Gnutls

Linuxmint

Rocky Linux

Slackware

Ubuntu

References · 105

• https://ubuntu.com/security/CVE-2025-14831 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:5585 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4271-1 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-4188.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-9820 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-5585.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20984-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-4188.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-9820 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:3477 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:13812 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1043 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20446-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8043-1 · Vendor Advisory