CVE-2025-9820

Discovered by AISLEPUBLISHEDCWE-121

Description

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

CVSS Base Scores

CVSS v3.1(Primary)

4.0

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected Products

Vendor	Product	Version	Status
Red Hat	GnuTLS	0:3.8.10-3.el10_1	unaffected
Red Hat	GnuTLS	0:3.6.16-8.el8_10.5	—
Red Hat	GnuTLS	0:3.8.3-10.el9_7	—
Red Hat	GnuTLS	7.13.5-4.1777325677	—
Red Hat	GnuTLS	7.13.5-4.1777325711	—
Red Hat	GnuTLS	7.13.5-4.1777325710	—
Red Hat	GnuTLS	7.13.5-3.1777325680	—
Red Hat	GnuTLS	7.13.5-4.1777325709	—
Red Hat	GnuTLS	7.13.5-4.1777325680	—
Red Hat	GnuTLS	7.13.5-4.1777325708	—
Red Hat	GnuTLS	1774002867	—
Red Hat	GnuTLS	1775668717	—
Red Hat	GnuTLS	1775675922	—
Red Hat	GnuTLS	3.8.12-1.1.hum1	—
Red Hat	GnuTLS	1773685509	—
Red Hat	GnuTLS	1773670073	—
Red Hat	GnuTLS	1773672059	—
Red Hat	GnuTLS	1773668803	—
Red Hat	GnuTLS	1773670137	—

Description

CVSS Base Scores

Affected Products

References