← CVE Intelligence

CVE-2025-9820

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function PUBLISHED

Description (CNA)

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedaffected 3.8.1; affected 3.8.2; affected 3.8.3; affected 3.8.4; affected 3.8.5; affected 3.8.6; affected 3.8.7; affected 3.8.8; affected 3.8.9; affected 3.8.10
Red Hat / Red Hat Enterprise Linux 10unaffected 0:3.8.10-3.el10_1 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:3.6.16-8.el8_10.5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:3.6.16-8.el8_10.5 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:3.8.3-10.el9_7 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:3.8.3-10.el9_7 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325677 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325711 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325710 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-3.1777325680 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325709 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325680 before *
Red Hat / RHEL-8 based Middleware Containersunaffected 7.13.5-4.1777325708 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459707 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459711 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791459759 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1789029076 before *
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18unaffected 1791966259 before *
Red Hat / Red Hat Ceph Storage 8unaffected 1774002867 before *
Red Hat / Red Hat Discovery 2unaffected 1775668717 before *
Red Hat / Red Hat Discovery 2unaffected 1775675922 before *
Red Hat / Red Hat Hardened Imagesunaffected 3.8.12-1.1.hum1 before *
Red Hat / Red Hat Insights proxy 1.5unaffected 1773685509 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1773670073 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1773672059 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1773668803 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1773670137 before *
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-121

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.