https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:10:07 +0000 https://vulnerability.circl.lu/vuln/cve-2025-6395 <p><strong>Affected:</strong> libgnutls, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Ceph Storage 7, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 6 and 5 more</p> <p>A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().</p> <p><strong>Affected:</strong> libgnutls, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Ceph Storage 7, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat Enterprise Linux 6 and 5 more</p> <p>A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().</p> https://vulnerability.circl.lu/vuln/cve-2025-6395 https://vulnerability.circl.lu/vuln/usn-7635-1 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gnutls28, Ubuntu:24.04:LTS: gnutls28</p> <p>It was discovered that GnuTLS incorrectly handled exporting Subject Alternative Name (SAN) entries containing an otherName. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-32988)</p> <p>It was discovered that GnuTLS incorrectly handled parsing the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2025-32989)</p> <p>It was discovered that the GnuTLS certtool utility incorrectly handled parsing certain template files. An attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-32990)</p> <p>Stefan Bühler discovered that GnuTLS incorrectly handled parsing certain template files. An attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. (CVE-2025-6395)</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: gnutls28, Ubuntu:24.04:LTS: gnutls28</p> <p>It was discovered that GnuTLS incorrectly handled exporting Subject Alternative Name (SAN) entries containing an otherName. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-32988)</p> <p>It was discovered that GnuTLS incorrectly handled parsing the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly obtain sensitive information. (CVE-2025-32989)</p> <p>It was discovered that the GnuTLS certtool utility incorrectly handled parsing certain template files. An attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-32990)</p> <p>Stefan Bühler discovered that GnuTLS incorrectly handled parsing certain template files. An attacker could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. (CVE-2025-6395)</p> https://vulnerability.circl.lu/vuln/usn-7635-1