AZL-65088 CVE-2025-32989 affecting package gnutls for versions less than 3.7.11-4

🗓️ 10 Jul 2025 08:15:24Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Heap buffer overread in GnuTLS enables data exposure from malformed SCT extension.

Reporter	Title	Published	Views	Family All 131
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	16 Oct 202513:15	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in gnuTLS affects IBM Netezza Appliance	14 Jan 202609:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	31 Oct 202511:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in gnutls affect IBM SAN Volume Controller, IBM Spectrum Virtualize and IBM FlashSystem products	4 Dec 202520:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	16 Jan 202617:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	12 Nov 202507:00	–	ibm
IBM Security Bulletins	Security Bulletin: Allocation of resources without limits, heap-buffer-overread, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	28 Oct 202516:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	7 Nov 202516:42	–	ibm
ATTACKERKB	CVE-2025-32989	10 Jul 202508:05	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2025-1140)	18 Aug 202500:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-32989

21 Apr 2026 04:37Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.3

EPSS0.00113

SSVC

gnutls certificate transparency sct extension oid x509 parsing heap buffer overread gnutls versions older