Skip to content
fr Sign in
4.0 Medium

CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11…

Description

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Affected products and versions

Product Affected versions Fixed in
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Ceph Storage 8 1774002867 earliest → < 1774002867 1774002867
Red Hat Discovery 2 1775675922 earliest → < 1775675922 1775675922
Red Hat Insights proxy 1.5 1773685509 earliest → < 1773685509 1773685509
Show the 6 other branches
Product Affected versions Fixed in
Red Hat Update Infrastructure 5 1773670137 earliest → < 1773670137 1773670137
Red Hat Hardened Images 3.8 earliest → < 3.8.12-1.1.hum1 3.8.12-1.1.hum1
RHEL-8 based Middleware Containers 7.13 earliest → < 7.13.5-4.1777325708 7.13.5-4.1777325708
SIMATIC CN 4100 5.0 earliest → < 5.0 5.0
Red Hat In-Vehicle Operating System 1 Versions not published
Cert Manager support for Red Hat OpenShift release 1.18 1791966259 earliest → < 1791966259 1791966259

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Enterprise Linux 10

The 1455 CVEs of Red Hat Enterprise Linux 10 →
CVE-2026-120749 Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus 6.2 Medium CVE-2026-123151 Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail Not rated CVE-2026-121997 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch 8.1 High CVE-2026-121996 Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length 8.2 High
Track this CVE