rpm package
suse/gnutls&distro=SUSE Linux Enterprise Server 16.0
pkg:rpm/suse/gnutls&distro=SUSE%20Linux%20Enterprise%20Server%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2025-14831 | Med | 5.3 | < 3.8.10-160000.2.1 | 3.8.10-160000.2.1 | Feb 9, 2026 | A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs). | |
| CVE-2025-9820 | Med | 4.0 | < 3.8.10-160000.2.1 | 3.8.10-160000.2.1 | Jan 26, 2026 | A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error c |
- affected < 3.8.10-160000.2.1fixed 3.8.10-160000.2.1
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
- affected < 3.8.10-160000.2.1fixed 3.8.10-160000.2.1
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error c