Description
A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service (DoS) that could potentially crash the system.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
Low
Affected products
- gnu / gnutls
- RedHat / enterprise_linux6.0 – 6.0
- RedHat / enterprise_linux7.0 – 7.0
- RedHat / enterprise_linux10.0 – 10.0
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / openshift_container_platform4.0 – 4.0
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:16115
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:16116
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:17181
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:17348
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:17361
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:17415
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:19088
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:22529
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2026:7477
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2025-32990
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2359620
- MAILING_LISThttps://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html
Updated 17m ago · 8 sources