Vulnerability-Lookup

CVE-2025-14831 (GCVE-0-2025-14831)

Vulnerability from cvelistv5 – Published: 2026-02-09 14:51 – Updated: 2026-06-10 17:34

Title

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Summary

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

redhat

References

25 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:13812	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16008	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16009	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:16174	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:25096	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3477	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4188	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4655	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4943	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5585	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5606	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6618	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6630	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6737	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6738	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7329	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7335	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:7477	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8746	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8747	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:8748	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-14831	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2423177	issue-trackingx_refsource_REDHAT
https://gitlab.com/gnutls/gnutls/-/issues/1773
https://cert-portal.siemens.com/productcert/html/…

Impacted products

35 products

Vendor	Product	Version
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.8.10-3.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.8.9-9.el10_0.17 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:3.6.16-8.el8_10.5 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.8.3-10.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:3.7.6-21.el9_2.5 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream cpe:/o:redhat:rhel_e4s:9.2::baseos
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:3.8.3-4.el9_4.5 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/o:redhat:rhel_eus:9.4::baseos
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:3.8.3-6.el9_6.3 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/o:redhat:rhel_eus:9.6::baseos
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-4.1777325677 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-4.1777325711 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-4.1777325710 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-3.1777325680 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-4.1777325709 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-4.1777325680 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	RHEL-8 based Middleware Containers	Unaffected: 7.13.5-4.1777325708 , < * (rpm) cpe:/a:redhat:rhosemc:1.0::el8
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: 1780681984 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: 1775740563 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778244559 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778244531 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1778244546 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1775680192 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1775680262 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat AI Inference Server 3.3	Unaffected: 1775749857 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.3::el9
Red Hat	Red Hat Ceph Storage 8	Unaffected: 1774002867 , < * (rpm) cpe:/a:redhat:ceph_storage:8::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1775668717 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Discovery 2	Unaffected: 1775675922 , < * (rpm) cpe:/a:redhat:discovery:2::el9
Red Hat	Red Hat Hardened Images	Unaffected: 3.8.12-1.1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Insights proxy 1.5	Unaffected: 1773685509 , < * (rpm) cpe:/a:redhat:insights_proxy:1.5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1773670073 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1773672059 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1773668803 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Update Infrastructure 5	Unaffected: 1773670137 , < * (rpm) cpe:/a:redhat:rhui:5::el9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Siemens	SIMATIC CN 4100	Affected: 0 , < V5.0 (custom)

Date Public

2026-02-09 14:26

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-14831",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-09T15:25:49.680881Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-09T15:26:01.239Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC CN 4100",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V5.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T12:02:57.683Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.1"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.10-3.el10_1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.9-9.el10_0.17",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-8.el8_10.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.6.16-8.el8_10.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.3-10.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.3-10.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream",
            "cpe:/o:redhat:rhel_e4s:9.2::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.7.6-21.el9_2.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream",
            "cpe:/o:redhat:rhel_eus:9.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.3-4.el9_4.5",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/o:redhat:rhel_eus:9.6::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.8.3-6.el9_6.3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-4.1777325677",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-businesscentral-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-4.1777325711",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-controller-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-4.1777325710",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-3.1777325680",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-kieserver-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-4.1777325709",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-process-migration-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-4.1777325680",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhosemc:1.0::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhpam-7/rhpam-smartrouter-rhel8",
          "product": "RHEL-8 based Middleware Containers",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "7.13.5-4.1777325708",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/model-opt-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1780681984",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1775740563",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/model-opt-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1778244559",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-rocm-rhel9",
          "product": "Red Hat AI Inference Server 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1778244531",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-spyre-rhel9",
          "product": "Red Hat AI Inference Server 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1778244546",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1775680192",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-rocm-rhel9",
          "product": "Red Hat AI Inference Server 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1775680262",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.3::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/model-opt-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.3",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1775749857",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ceph_storage:8::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhceph/rhceph-8-rhel9",
          "product": "Red Hat Ceph Storage 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1774002867",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-server-rhel9",
          "product": "Red Hat Discovery 2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1775668717",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:discovery:2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "discovery/discovery-ui-rhel9",
          "product": "Red Hat Discovery 2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1775675922",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:hummingbird:1"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls-main",
          "product": "Red Hat Hardened Images",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "3.8.12-1.1.hum1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:insights_proxy:1.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "insights-proxy/insights-proxy-container-rhel9",
          "product": "Red Hat Insights proxy 1.5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1773685509",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/cds-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1773670073",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/haproxy-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1773672059",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/installer-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1773668803",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:rhui:5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhui5/rhua-rhel9",
          "product": "Red Hat Update Infrastructure 5",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1773670137",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "affected",
          "packageName": "gnutls",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "datePublic": "2026-02-09T14:26:34.939Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs)."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T17:34:40.704Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:13812",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:13812"
        },
        {
          "name": "RHSA-2026:16008",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:16008"
        },
        {
          "name": "RHSA-2026:16009",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:16009"
        },
        {
          "name": "RHSA-2026:16174",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:16174"
        },
        {
          "name": "RHSA-2026:25096",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:25096"
        },
        {
          "name": "RHSA-2026:3477",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3477"
        },
        {
          "name": "RHSA-2026:4188",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:4188"
        },
        {
          "name": "RHSA-2026:4655",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:4655"
        },
        {
          "name": "RHSA-2026:4943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:4943"
        },
        {
          "name": "RHSA-2026:5585",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5585"
        },
        {
          "name": "RHSA-2026:5606",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5606"
        },
        {
          "name": "RHSA-2026:6618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:6618"
        },
        {
          "name": "RHSA-2026:6630",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:6630"
        },
        {
          "name": "RHSA-2026:6737",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:6737"
        },
        {
          "name": "RHSA-2026:6738",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:6738"
        },
        {
          "name": "RHSA-2026:7329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:7329"
        },
        {
          "name": "RHSA-2026:7335",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:7335"
        },
        {
          "name": "RHSA-2026:7477",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:7477"
        },
        {
          "name": "RHSA-2026:8746",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:8746"
        },
        {
          "name": "RHSA-2026:8747",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:8747"
        },
        {
          "name": "RHSA-2026:8748",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:8748"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-14831"
        },
        {
          "name": "RHBZ#2423177",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423177"
        },
        {
          "url": "https://gitlab.com/gnutls/gnutls/-/issues/1773"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-12-17T14:48:30.222Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-02-09T14:26:34.939Z",
          "value": "Made public."
        }
      ],
      "title": "Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-407: Inefficient Algorithmic Complexity"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-14831",
    "datePublished": "2026-02-09T14:51:32.447Z",
    "dateReserved": "2025-12-17T14:44:59.859Z",
    "dateUpdated": "2026-06-10T17:34:40.704Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-14831",
      "date": "2026-06-20",
      "epss": "0.00638",
      "percentile": "0.45745"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-14831\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-02-09T15:16:09.937\",\"lastModified\":\"2026-06-10T18:16:39.617\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 un fallo en GnuTLS. Esta vulnerabilidad permite una denegaci\u00f3n de servicio (DoS) mediante un consumo excesivo de CPU (Unidad Central de Procesamiento) y memoria a trav\u00e9s de certificados maliciosos especialmente dise\u00f1ados que contienen un gran n\u00famero de restricciones de nombre y nombres alternativos del sujeto (SANs).\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\",\"baseScore\":5.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-407\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13812\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16008\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16009\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16174\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:25096\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3477\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4188\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4655\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:4943\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5585\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5606\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6618\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6630\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6737\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6738\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7329\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7335\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:7477\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8746\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8747\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8748\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-14831\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2423177\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://gitlab.com/gnutls/gnutls/-/issues/1773\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-032379.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"SIMATIC CN 4100\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V5.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-032379.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-05-12T12:02:57.683Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-14831\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-02-09T15:25:49.680881Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-02-09T15:25:52.476Z\"}}], \"cna\": {\"title\": \"Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.10-3.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.9-9.el10_0.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-8.el8_10.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.6.16-8.el8_10.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.3-10.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\", \"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.3-10.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\", \"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.7.6-21.el9_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\", \"cpe:/o:redhat:rhel_eus:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.3-4.el9_4.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\", \"cpe:/o:redhat:rhel_eus:9.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.8.3-6.el9_6.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325677\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-businesscentral-monitoring-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325711\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-businesscentral-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325710\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-3.1777325680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-dashbuilder-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325709\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-kieserver-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325680\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-process-migration-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhosemc:1.0::el8\"], \"vendor\": \"Red Hat\", \"product\": \"RHEL-8 based Middleware Containers\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.13.5-4.1777325708\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhpam-7/rhpam-smartrouter-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1780681984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775740563\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244531\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244546\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-spyre-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775680192\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775680262\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775749857\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1774002867\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhceph/rhceph-8-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775668717\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:discovery:2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Discovery 2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775675922\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"discovery/discovery-ui-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"3.8.12-1.1.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"gnutls-main\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:insights_proxy:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Insights proxy 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1773685509\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"insights-proxy/insights-proxy-container-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1773670073\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/cds-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1773672059\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/haproxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1773668803\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/installer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1773670137\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhui5/rhua-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 6\", \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"gnutls\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-12-17T14:48:30.222Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-02-09T14:26:34.939Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-02-09T14:26:34.939Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:13812\", \"name\": \"RHSA-2026:13812\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16008\", \"name\": \"RHSA-2026:16008\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16009\", \"name\": \"RHSA-2026:16009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16174\", \"name\": \"RHSA-2026:16174\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:25096\", \"name\": \"RHSA-2026:25096\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3477\", \"name\": \"RHSA-2026:3477\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4188\", \"name\": \"RHSA-2026:4188\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4655\", \"name\": \"RHSA-2026:4655\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:4943\", \"name\": \"RHSA-2026:4943\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5585\", \"name\": \"RHSA-2026:5585\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5606\", \"name\": \"RHSA-2026:5606\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6618\", \"name\": \"RHSA-2026:6618\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6630\", \"name\": \"RHSA-2026:6630\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6737\", \"name\": \"RHSA-2026:6737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6738\", \"name\": \"RHSA-2026:6738\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7329\", \"name\": \"RHSA-2026:7329\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7335\", \"name\": \"RHSA-2026:7335\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:7477\", \"name\": \"RHSA-2026:7477\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8746\", \"name\": \"RHSA-2026:8746\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8747\", \"name\": \"RHSA-2026:8747\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8748\", \"name\": \"RHSA-2026:8748\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2025-14831\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2423177\", \"name\": \"RHBZ#2423177\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://gitlab.com/gnutls/gnutls/-/issues/1773\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-407\", \"description\": \"Inefficient Algorithmic Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-06-10T17:34:40.704Z\"}, \"x_redhatCweChain\": \"CWE-407: Inefficient Algorithmic Complexity\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-14831\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-06-10T17:34:40.704Z\", \"dateReserved\": \"2025-12-17T14:44:59.859Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-02-09T14:51:32.447Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

SUSE-SU-2026:20968-1

Vulnerability from csaf_suse - Published: 2026-03-30 14:36 - Updated: 2026-03-30 14:36

Summary

Security update for gnutls

Severity

Moderate

Notes

Title of the patch: Security update for gnutls

Description of the patch: This update for gnutls fixes the following issues: - CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960) - CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132) - Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256. (bsc#1258083, jsc#PED-15752, jsc#PED-15753)

Patchnames: SUSE-SL-Micro-6.2-464

CVE-2025-14831

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-9820

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

13 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1254132	self
https://bugzilla.suse.com/1257960	self
https://bugzilla.suse.com/1258083	self
https://www.suse.com/security/cve/CVE-2025-14831/	self
https://www.suse.com/security/cve/CVE-2025-9820/	self
https://www.suse.com/security/cve/CVE-2025-14831	external
https://bugzilla.suse.com/1257960	external
https://www.suse.com/security/cve/CVE-2025-9820	external
https://bugzilla.suse.com/1254132	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for gnutls",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for gnutls fixes the following issues:\n\n- CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960)\n- CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)\n- Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256. (bsc#1258083, jsc#PED-15752, jsc#PED-15753)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SL-Micro-6.2-464",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20968-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:20968-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620968-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:20968-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045314.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254132",
        "url": "https://bugzilla.suse.com/1254132"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257960",
        "url": "https://bugzilla.suse.com/1257960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258083",
        "url": "https://bugzilla.suse.com/1258083"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14831 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14831/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9820 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9820/"
      }
    ],
    "title": "Security update for gnutls",
    "tracking": {
      "current_release_date": "2026-03-30T14:36:26Z",
      "generator": {
        "date": "2026-03-30T14:36:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:20968-1",
      "initial_release_date": "2026-03-30T14:36:26Z",
      "revision_history": [
        {
          "date": "2026-03-30T14:36:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.aarch64",
                  "product_id": "gnutls-3.8.10-160000.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.aarch64",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.ppc64le",
                  "product_id": "gnutls-3.8.10-160000.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.ppc64le",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.s390x",
                  "product_id": "gnutls-3.8.10-160000.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.s390x",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.x86_64",
                  "product_id": "gnutls-3.8.10-160000.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.x86_64",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.2",
                "product": {
                  "name": "SUSE Linux Micro 6.2",
                  "product_id": "SUSE Linux Micro 6.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.s390x as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.s390x as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Micro 6.2",
          "product_id": "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14831",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14831"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x",
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14831",
          "url": "https://www.suse.com/security/cve/CVE-2025-14831"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257960 for CVE-2025-14831",
          "url": "https://bugzilla.suse.com/1257960"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-30T14:36:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-14831"
    },
    {
      "cve": "CVE-2025-9820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x",
          "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9820",
          "url": "https://www.suse.com/security/cve/CVE-2025-9820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254132 for CVE-2025-9820",
          "url": "https://bugzilla.suse.com/1254132"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Micro 6.2:libgnutls30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-30T14:36:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-9820"
    }
  ]
}

SUSE-SU-2026:20984-1

Vulnerability from csaf_suse - Published: 2026-03-30 14:36 - Updated: 2026-03-30 14:36

Summary

Security update for gnutls

Severity

Moderate

Notes

Title of the patch: Security update for gnutls

Patchnames: SUSE-SLES-16.0-464

CVE-2025-14831

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-9820

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 40 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

13 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1254132	self
https://bugzilla.suse.com/1257960	self
https://bugzilla.suse.com/1258083	self
https://www.suse.com/security/cve/CVE-2025-14831/	self
https://www.suse.com/security/cve/CVE-2025-9820/	self
https://www.suse.com/security/cve/CVE-2025-14831	external
https://bugzilla.suse.com/1257960	external
https://www.suse.com/security/cve/CVE-2025-9820	external
https://bugzilla.suse.com/1254132	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for gnutls",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for gnutls fixes the following issues:\n\n- CVE-2025-14831: Fixed DoS via excessive resource consumption during certificate verification. (bsc#1257960)\n- CVE-2025-9820: Fixed a buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)\n- Add the functionality to allow to specify the hash algorithm for the PSK. This fixes a bug in the current implementation where the binder is always calculated with SHA256. (bsc#1258083, jsc#PED-15752, jsc#PED-15753)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLES-16.0-464",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_20984-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:20984-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202620984-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:20984-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-April/045347.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1254132",
        "url": "https://bugzilla.suse.com/1254132"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1257960",
        "url": "https://bugzilla.suse.com/1257960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258083",
        "url": "https://bugzilla.suse.com/1258083"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14831 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14831/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-9820 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-9820/"
      }
    ],
    "title": "Security update for gnutls",
    "tracking": {
      "current_release_date": "2026-03-30T14:36:26Z",
      "generator": {
        "date": "2026-03-30T14:36:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:20984-1",
      "initial_release_date": "2026-03-30T14:36:26Z",
      "revision_history": [
        {
          "date": "2026-03-30T14:36:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.aarch64",
                  "product_id": "gnutls-3.8.10-160000.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "libgnutls-devel-3.8.10-160000.2.1.aarch64",
                  "product_id": "libgnutls-devel-3.8.10-160000.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.aarch64",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
                  "product_id": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx30-3.8.10-160000.2.1.aarch64",
                "product": {
                  "name": "libgnutlsxx30-3.8.10-160000.2.1.aarch64",
                  "product_id": "libgnutlsxx30-3.8.10-160000.2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.ppc64le",
                  "product_id": "gnutls-3.8.10-160000.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "libgnutls-devel-3.8.10-160000.2.1.ppc64le",
                  "product_id": "libgnutls-devel-3.8.10-160000.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.ppc64le",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
                  "product_id": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
                "product": {
                  "name": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
                  "product_id": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.s390x",
                  "product_id": "gnutls-3.8.10-160000.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "libgnutls-devel-3.8.10-160000.2.1.s390x",
                  "product_id": "libgnutls-devel-3.8.10-160000.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.s390x",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
                  "product_id": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx30-3.8.10-160000.2.1.s390x",
                "product": {
                  "name": "libgnutlsxx30-3.8.10-160000.2.1.s390x",
                  "product_id": "libgnutlsxx30-3.8.10-160000.2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "gnutls-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "gnutls-3.8.10-160000.2.1.x86_64",
                  "product_id": "gnutls-3.8.10-160000.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls-devel-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "libgnutls-devel-3.8.10-160000.2.1.x86_64",
                  "product_id": "libgnutls-devel-3.8.10-160000.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutls30-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "libgnutls30-3.8.10-160000.2.1.x86_64",
                  "product_id": "libgnutls30-3.8.10-160000.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
                  "product_id": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libgnutlsxx30-3.8.10-160000.2.1.x86_64",
                "product": {
                  "name": "libgnutlsxx30-3.8.10-160000.2.1.x86_64",
                  "product_id": "libgnutlsxx30-3.8.10-160000.2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server 16.0",
                  "product_id": "SUSE Linux Enterprise Server 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "gnutls-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "gnutls-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls-devel-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutls-devel-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutls30-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutls30-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libgnutlsxx30-3.8.10-160000.2.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
        },
        "product_reference": "libgnutlsxx30-3.8.10-160000.2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14831",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14831"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14831",
          "url": "https://www.suse.com/security/cve/CVE-2025-14831"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1257960 for CVE-2025-14831",
          "url": "https://bugzilla.suse.com/1257960"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-30T14:36:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-14831"
    },
    {
      "cve": "CVE-2025-9820",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-9820"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-9820",
          "url": "https://www.suse.com/security/cve/CVE-2025-9820"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1254132 for CVE-2025-9820",
          "url": "https://bugzilla.suse.com/1254132"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:gnutls-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutls30-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx-devel-3.8.10-160000.2.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:libgnutlsxx30-3.8.10-160000.2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-30T14:36:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-9820"
    }
  ]
}

WID-SEC-W-2026-0359

Vulnerability from csaf_certbund - Published: 2026-02-09 23:00 - Updated: 2026-06-10 22:00

Summary

GnuTLS: Mehrere Schwachstellen ermöglichen Denial of Service

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: GnuTLS (GNU Transport Layer Security Library) ist eine im Quelltext frei verfügbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.

Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme: - Linux - UNIX - Windows

CVE-2025-14831

Affected products

Known affected 12 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
IBM QRadar SIEM <7.5.0 UP15 IF02 IBM / QRadar SIEM		<7.5.0 UP15 IF02
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM MQ IBM	`cpe:/a:ibm:mq:-`	—
Meinberg LANTIME <7.10.009 Meinberg / LANTIME		<7.10.009
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Open Source GnuTLS <3.8.12 Open Source / GnuTLS		<3.8.12
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
IBM DB2 IBM	`cpe:/a:ibm:db2:-`	—

CVE-2026-1584

Affected products

Known affected 12 products

Product	Identifier	Version
Debian Linux Debian	`cpe:/o:debian:debian_linux:-`	—
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
IBM QRadar SIEM <7.5.0 UP15 IF02 IBM / QRadar SIEM		<7.5.0 UP15 IF02
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
IBM MQ IBM	`cpe:/a:ibm:mq:-`	—
Meinberg LANTIME <7.10.009 Meinberg / LANTIME		<7.10.009
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Open Source GnuTLS <3.8.12 Open Source / GnuTLS		<3.8.12
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
IBM DB2 IBM	`cpe:/a:ibm:db2:-`	—

References

40 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://gnutls.org/security-new.html	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://ubuntu.com/security/notices/USN-8043-1	external
https://lists.debian.org/debian-security-announce…	external
https://lists.debian.org/debian-lts-announce/2026…	external
https://access.redhat.com/errata/RHSA-2026:3477	external
https://linux.oracle.com/errata/ELSA-2026-3477.html	external
https://errata.build.resf.org/RLSA-2026:3477	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:4188	external
https://errata.build.resf.org/RLSA-2026:4188	external
https://lists.suse.com/pipermail/sle-security-upd…	external
http://linux.oracle.com/errata/ELSA-2026-4188.html	external
https://linux.oracle.com/errata/ELSA-2026-50149.html	external
https://access.redhat.com/errata/RHSA-2026:4655	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:4943	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://access.redhat.com/errata/RHSA-2026:5585	external
https://access.redhat.com/errata/RHSA-2026:5606	external
https://linux.oracle.com/errata/ELSA-2026-5585.html	external
https://access.redhat.com/errata/RHSA-2026:6341	external
https://access.redhat.com/errata/RHSA-2026:6630	external
https://access.redhat.com/errata/RHSA-2026:6618	external
https://errata.build.resf.org/RLSA-2026:5585	external
https://access.redhat.com/errata/RHSA-2026:6738	external
https://access.redhat.com/errata/RHSA-2026:6737	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
http://news.meinberg.de/668/	external
https://www.ibm.com/support/pages/node/7270594	external
https://access.redhat.com/errata/RHSA-2026:7477	external
https://access.redhat.com/errata/RHSA-2026:13812	external
https://www.ibm.com/support/pages/node/7273145	external
https://www.ibm.com/support/pages/node/7273312	external
https://access.redhat.com/errata/RHSA-2026:25096	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "GnuTLS (GNU Transport Layer Security Library) ist eine im Quelltext frei verf\u00fcgbare Bibliothek, die Secure Sockets Layer (SSL) und Transport Layer Security (TLS) implementiert.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in GnuTLS ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-0359 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0359.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-0359 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-0359"
      },
      {
        "category": "external",
        "summary": "GnuTLS Security Advisories vom 2026-02-09",
        "url": "https://gnutls.org/security-new.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-EF7170C9F6 vom 2026-02-10",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-ef7170c9f6"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2026-2B6035EE2B vom 2026-02-10",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-2b6035ee2b"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-8043-1 vom 2026-02-16",
        "url": "https://ubuntu.com/security/notices/USN-8043-1"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DSA-6140 vom 2026-02-18",
        "url": "https://lists.debian.org/debian-security-announce/2026/msg00049.html"
      },
      {
        "category": "external",
        "summary": "Debian Security Advisory DLA-4492 vom 2026-02-25",
        "url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00031.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3477 vom 2026-03-02",
        "url": "https://access.redhat.com/errata/RHSA-2026:3477"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-3477 vom 2026-03-02",
        "url": "https://linux.oracle.com/errata/ELSA-2026-3477.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:3477 vom 2026-03-05",
        "url": "https://errata.build.resf.org/RLSA-2026:3477"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:0829-1 vom 2026-03-05",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024630.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:4188 vom 2026-03-11",
        "url": "https://access.redhat.com/errata/RHSA-2026:4188"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:4188 vom 2026-03-11",
        "url": "https://errata.build.resf.org/RLSA-2026:4188"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:0862-1 vom 2026-03-11",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024672.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-4188 vom 2026-03-13",
        "url": "http://linux.oracle.com/errata/ELSA-2026-4188.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-50149 vom 2026-03-13",
        "url": "https://linux.oracle.com/errata/ELSA-2026-50149.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:4655 vom 2026-03-16",
        "url": "https://access.redhat.com/errata/RHSA-2026:4655"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:20708-1 vom 2026-03-18",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024718.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:4943 vom 2026-03-18",
        "url": "https://access.redhat.com/errata/RHSA-2026:4943"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:20654-1 vom 2026-03-18",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-March/024756.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:5585 vom 2026-03-24",
        "url": "https://access.redhat.com/errata/RHSA-2026:5585"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:5606 vom 2026-03-24",
        "url": "https://access.redhat.com/errata/RHSA-2026:5606"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2026-5585 vom 2026-03-25",
        "url": "https://linux.oracle.com/errata/ELSA-2026-5585.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6341 vom 2026-04-01",
        "url": "https://access.redhat.com/errata/RHSA-2026:6341"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6630 vom 2026-04-06",
        "url": "https://access.redhat.com/errata/RHSA-2026:6630"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6618 vom 2026-04-06",
        "url": "https://access.redhat.com/errata/RHSA-2026:6618"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2026:5585 vom 2026-04-07",
        "url": "https://errata.build.resf.org/RLSA-2026:5585"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6738 vom 2026-04-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:6738"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:6737 vom 2026-04-07",
        "url": "https://access.redhat.com/errata/RHSA-2026:6737"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:20968-1 vom 2026-04-08",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025158.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:20962-1 vom 2026-04-08",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025161.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2026:20984-1 vom 2026-04-09",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-April/025181.html"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2026.03 vom 2026-04-15",
        "url": "http://news.meinberg.de/668/"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7270594 vom 2026-04-23",
        "url": "https://www.ibm.com/support/pages/node/7270594"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:7477 vom 2026-05-03",
        "url": "https://access.redhat.com/errata/RHSA-2026:7477"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:13812 vom 2026-05-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:13812"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7273145 vom 2026-05-15",
        "url": "https://www.ibm.com/support/pages/node/7273145"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7273312 vom 2026-05-18",
        "url": "https://www.ibm.com/support/pages/node/7273312"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:25096 vom 2026-06-10",
        "url": "https://access.redhat.com/errata/RHSA-2026:25096"
      }
    ],
    "source_lang": "en-US",
    "title": "GnuTLS: Mehrere Schwachstellen erm\u00f6glichen Denial of Service",
    "tracking": {
      "current_release_date": "2026-06-10T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-11T10:51:38.646+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-0359",
      "initial_release_date": "2026-02-09T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-02-09T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-02-10T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2026-02-16T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2026-02-18T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-02-24T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Debian aufgenommen"
        },
        {
          "date": "2026-03-01T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-02T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-03-04T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-03-05T23:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-03-10T23:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-11T23:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-03-12T23:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-03-16T23:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-18T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von SUSE und Red Hat aufgenommen"
        },
        {
          "date": "2026-03-23T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-24T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2026-03-31T22:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-04-06T22:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-04-08T22:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2026-04-09T22:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von SUSE und European Union Vulnerability Database aufgenommen"
        },
        {
          "date": "2026-04-14T22:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2026-04-23T22:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-05-03T22:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-05T22:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-17T22:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-05-18T22:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-06-10T22:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "27"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Debian Linux",
            "product": {
              "name": "Debian Linux",
              "product_id": "2951",
              "product_identification_helper": {
                "cpe": "cpe:/o:debian:debian_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Debian"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM DB2",
            "product": {
              "name": "IBM DB2",
              "product_id": "T048379",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:db2:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "IBM MQ",
            "product": {
              "name": "IBM MQ",
              "product_id": "T021398",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:mq:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP15 IF02",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP15 IF02",
                  "product_id": "T053291"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP15 IF02",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP15 IF02",
                  "product_id": "T053291-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up15_if02"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.10.009",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.10.009",
                  "product_id": "T052850"
                }
              },
              {
                "category": "product_version",
                "name": "7.10.009",
                "product": {
                  "name": "Meinberg LANTIME 7.10.009",
                  "product_id": "T052850-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.10.009"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c3.8.12",
                "product": {
                  "name": "Open Source GnuTLS \u003c3.8.12",
                  "product_id": "T050670"
                }
              },
              {
                "category": "product_version",
                "name": "3.8.12",
                "product": {
                  "name": "Open Source GnuTLS 3.8.12",
                  "product_id": "T050670-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:gnu:gnutls:3.8.12"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "GnuTLS"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14831",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T053291",
          "T004914",
          "T021398",
          "T052850",
          "T032255",
          "T050670",
          "74185",
          "T048379"
        ]
      },
      "release_date": "2026-02-09T23:00:00.000+00:00",
      "title": "CVE-2025-14831"
    },
    {
      "cve": "CVE-2026-1584",
      "product_status": {
        "known_affected": [
          "2951",
          "T002207",
          "67646",
          "T000126",
          "T053291",
          "T004914",
          "T021398",
          "T052850",
          "T032255",
          "T050670",
          "74185",
          "T048379"
        ]
      },
      "release_date": "2026-02-09T23:00:00.000+00:00",
      "title": "CVE-2026-1584"
    }
  ]
}

WID-SEC-W-2026-1007

Vulnerability from csaf_certbund - Published: 2026-04-07 22:00 - Updated: 2026-06-11 22:00

Summary

IBM App Connect Enterprise: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: IBM App Connect Enterprise kombiniert die branchenbewährten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.

Angriff: Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um einen SQL-Injection Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2025-14550

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-14831

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-15281

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-15366

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-15367

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-15599

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-55130

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-55131

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-55132

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-59465

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-59466

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-68470

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2025-9820

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-0540

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-0861

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-0915

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-0980

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1207

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1285

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1287

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1299

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1312

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1530

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1531

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-1961

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-21637

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-22029

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-23490

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-2436

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-25518

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-27137

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-27138

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-27959

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-29063

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-29087

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-30922

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-3632

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-3633

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-3634

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-3731

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-4271

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-4324

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

CVE-2026-5119

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:10.0_extended_update_support`	10.0 Extended Update Support
IBM App Connect Enterprise IBM / App Connect Enterprise	`cpe:/a:ibm:app_connect_enterprise:-`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
IBM App Connect Enterprise <13.0.7.1 IBM / App Connect Enterprise		<13.0.7.1

References

14 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.ibm.com/support/pages/node/7268737	external
https://www.ibm.com/support/pages/node/7268738	external
https://www.ibm.com/support/pages/node/7268740	external
https://www.ibm.com/support/pages/node/7268741	external
https://www.ibm.com/support/pages/node/7268743	external
https://www.ibm.com/support/pages/node/7268744	external
https://www.ibm.com/support/pages/node/7268745	external
https://www.ibm.com/support/pages/node/7268747	external
https://access.redhat.com/errata/RHSA-2026:14087	external
https://access.redhat.com/errata/RHSA-2026:17083	external
https://www.ibm.com/support/pages/node/7274746	external
https://www.ibm.com/support/pages/node/7275963	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "IBM App Connect Enterprise kombiniert die branchenbew\u00e4hrten Technologien des IBM Integration Bus mit Cloud-nativen Technologien.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in IBM App Connect Enterprise ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuf\u00fchren, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, um einen SQL-Injection Angriff durchzuf\u00fchren, und um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1007 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1007.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1007 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1007"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268737 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268737"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268738 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268738"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268740 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268740"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268741 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268741"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268743 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268743"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268744 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268744"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268745 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268745"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7268747 vom 2026-04-07",
        "url": "https://www.ibm.com/support/pages/node/7268747"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:14087 vom 2026-05-06",
        "url": "https://access.redhat.com/errata/RHSA-2026:14087"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:17083 vom 2026-05-13",
        "url": "https://access.redhat.com/errata/RHSA-2026:17083"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7274746 vom 2026-06-01",
        "url": "https://www.ibm.com/support/pages/node/7274746"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7275963 vom 2026-06-11",
        "url": "https://www.ibm.com/support/pages/node/7275963"
      }
    ],
    "source_lang": "en-US",
    "title": "IBM App Connect Enterprise: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-06-11T22:00:00.000+00:00",
      "generator": {
        "date": "2026-06-12T07:37:37.117+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.6.0"
        }
      },
      "id": "WID-SEC-W-2026-1007",
      "initial_release_date": "2026-04-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-05-06T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-05-14T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-06-01T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-06-11T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von IBM und IBM-APAR aufgenommen"
        }
      ],
      "status": "final",
      "version": "5"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c13.0.7.1",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c13.0.7.1",
                  "product_id": "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
                }
              },
              {
                "category": "product_version",
                "name": "13.0.7.1",
                "product": {
                  "name": "IBM App Connect Enterprise 13.0.7.1",
                  "product_id": "2F33676F-DD00-4E4F-ADCC-F29993D51A12-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:13.0.7.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "IBM App Connect Enterprise",
                "product": {
                  "name": "IBM App Connect Enterprise",
                  "product_id": "T052517",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "App Connect Enterprise"
          },
          {
            "category": "product_name",
            "name": "IBM QRadar SIEM",
            "product": {
              "name": "IBM QRadar SIEM",
              "product_id": "T021415",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:qradar_siem:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "67646",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:-"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "10.0 Extended Update Support",
                "product": {
                  "name": "Red Hat Enterprise Linux 10.0 Extended Update Support",
                  "product_id": "T054024",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:10.0_extended_update_support"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14550",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-14550"
    },
    {
      "cve": "CVE-2025-14831",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-14831"
    },
    {
      "cve": "CVE-2025-15281",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-15281"
    },
    {
      "cve": "CVE-2025-15366",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-15366"
    },
    {
      "cve": "CVE-2025-15367",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-15367"
    },
    {
      "cve": "CVE-2025-15599",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-15599"
    },
    {
      "cve": "CVE-2025-55130",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-55130"
    },
    {
      "cve": "CVE-2025-55131",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-55131"
    },
    {
      "cve": "CVE-2025-55132",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-55132"
    },
    {
      "cve": "CVE-2025-59465",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-59465"
    },
    {
      "cve": "CVE-2025-59466",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-59466"
    },
    {
      "cve": "CVE-2025-68470",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-68470"
    },
    {
      "cve": "CVE-2025-9820",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2025-9820"
    },
    {
      "cve": "CVE-2026-0540",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-0540"
    },
    {
      "cve": "CVE-2026-0861",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-0861"
    },
    {
      "cve": "CVE-2026-0915",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-0915"
    },
    {
      "cve": "CVE-2026-0980",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-0980"
    },
    {
      "cve": "CVE-2026-1207",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1207"
    },
    {
      "cve": "CVE-2026-1285",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1285"
    },
    {
      "cve": "CVE-2026-1287",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1287"
    },
    {
      "cve": "CVE-2026-1299",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1299"
    },
    {
      "cve": "CVE-2026-1312",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1312"
    },
    {
      "cve": "CVE-2026-1530",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1530"
    },
    {
      "cve": "CVE-2026-1531",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1531"
    },
    {
      "cve": "CVE-2026-1961",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-1961"
    },
    {
      "cve": "CVE-2026-21637",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-21637"
    },
    {
      "cve": "CVE-2026-22029",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-22029"
    },
    {
      "cve": "CVE-2026-23490",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-23490"
    },
    {
      "cve": "CVE-2026-2436",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-2436"
    },
    {
      "cve": "CVE-2026-25518",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-25518"
    },
    {
      "cve": "CVE-2026-27137",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-27137"
    },
    {
      "cve": "CVE-2026-27138",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-27138"
    },
    {
      "cve": "CVE-2026-27959",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-27959"
    },
    {
      "cve": "CVE-2026-29063",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-29063"
    },
    {
      "cve": "CVE-2026-29087",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-29087"
    },
    {
      "cve": "CVE-2026-30922",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-30922"
    },
    {
      "cve": "CVE-2026-3632",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-3632"
    },
    {
      "cve": "CVE-2026-3633",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-3633"
    },
    {
      "cve": "CVE-2026-3634",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-3634"
    },
    {
      "cve": "CVE-2026-3731",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-3731"
    },
    {
      "cve": "CVE-2026-4271",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-4271"
    },
    {
      "cve": "CVE-2026-4324",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-4324"
    },
    {
      "cve": "CVE-2026-5119",
      "product_status": {
        "known_affected": [
          "T054024",
          "T052517",
          "67646",
          "T021415",
          "2F33676F-DD00-4E4F-ADCC-F29993D51A12"
        ]
      },
      "release_date": "2026-04-07T22:00:00.000+00:00",
      "title": "CVE-2026-5119"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-14831 (GCVE-0-2025-14831)

SUSE-SU-2026:20968-1

SUSE-SU-2026:20984-1

WID-SEC-W-2026-0359

WID-SEC-W-2026-1007

Tags

Sightings

Nomenclature