Aller au contenu
en Se connecter
4.0 Moyenne

CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11…

Description

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat Enterprise Linux 10 Versions non publiées
Red Hat Enterprise Linux 6 Versions non publiées
Red Hat Enterprise Linux 7 Versions non publiées
Red Hat Enterprise Linux 8 Versions non publiées
Red Hat Enterprise Linux 9 Versions non publiées
Red Hat OpenShift Container Platform 4 Versions non publiées
Red Hat Ceph Storage 8 1774002867 premières → < 1774002867 1774002867
Red Hat Discovery 2 1775675922 premières → < 1775675922 1775675922
Red Hat Insights proxy 1.5 1773685509 premières → < 1773685509 1773685509
Afficher les 6 autres branches
Produit Versions touchées Corrigé en
Red Hat Update Infrastructure 5 1773670137 premières → < 1773670137 1773670137
Red Hat Hardened Images 3.8 premières → < 3.8.12-1.1.hum1 3.8.12-1.1.hum1
RHEL-8 based Middleware Containers 7.13 premières → < 7.13.5-4.1777325708 7.13.5-4.1777325708
SIMATIC CN 4100 5.0 premières → < 5.0 5.0
Red Hat In-Vehicle Operating System 1 Versions non publiées
Cert Manager support for Red Hat OpenShift release 1.18 1791966259 premières → < 1791966259 1791966259

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat Enterprise Linux 10

Les 1455 CVE de Red Hat Enterprise Linux 10 →
CVE-2026-120749 Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus 6.2 Moyenne CVE-2026-123151 Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail Non notée CVE-2026-121997 Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatch 8.1 Élevée CVE-2026-121996 Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length 8.2 Élevée
Suivre cette CVE