Lucene search
+L

132 matches found

OSV
OSV
added 2025/07/10 10:15 a.m.6 views

AZL-65100 CVE-2025-32990 affecting package gnutls for versions less than 3.8.3-6

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS6.7AI score0.0072EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 10:15 a.m.15 views

AZL-65091 CVE-2025-32990 affecting package gnutls for versions less than 3.7.11-4

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS6.7AI score0.0072EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 10:15 a.m.3 views

DEBIAN-CVE-2025-32990

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS6.3AI score0.0072EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/10 10:15 a.m.20 views

CVE-2025-32990

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS0.0072EPSS
SaveExploits0References14
OSV
OSV
added 2025/07/10 10:15 a.m.6 views

ALPINE-CVE-2025-32990

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS6.7AI score0.0072EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/10 10:15 a.m.6 views

UBUNTU-CVE-2025-32990

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS6.8AI score0.0072EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/07/10 9:41 a.m.45 views

CVE-2025-32990 Gnutls: vulnerability in gnutls certtool template parsing

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

6.5CVSS0.0072EPSS
SaveExploits0References12
ATTACKERKB
ATTACKERKB
added 2025/07/10 9:41 a.m.1 views

CVE-2025-32990

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS5.7AI score0.0072EPSS
SaveExploits0References13
Vulnrichment
Vulnrichment
added 2025/07/10 9:41 a.m.4 views

CVE-2025-32990 Gnutls: vulnerability in gnutls certtool template parsing

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

6.5CVSS7.2AI score0.0072EPSS
SaveExploits0References12
CVE
CVE
added 2025/07/10 9:41 a.m.122 views

CVE-2025-32990

CVE-2025-32990 is a GnuTLS issue affecting certtool template parsing. A heap-buffer-overflow (off-by-one) can cause an out-of-bounds write to a NULL pointer, leading to memory corruption and a potential denial-of-service. The connected advisories confirm the vulnerability in GnuTLS and reference ...

8.2CVSS6.6AI score0.0072EPSS
SaveExploits0References14Affected Software1
RedhatCVE
RedhatCVE
added 2025/07/10 9:41 a.m.7 views

CVE-2025-32990

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

8.2CVSS7.2AI score0.0072EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/07/10 12:0 a.m.2 views

GnuTLS 安全漏洞

GnuTLS is a free secure communication library for implementing SSL, TLS and DTLS protocols. A security vulnerability exists in GnuTLS that stems from a heap buffer overflow in the certtool tool's template parsing logic, which could lead to memory corruption and denial of service...

8.2CVSS7.2AI score0.0072EPSS
SaveExploits0References7
Snyk
Snyk
added 2025/07/09 7:0 a.m.5 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the template parsing process within the certtool utility. An attacker can cause memory corruption and potentially crash the system by providing a specially crafted template file that triggers an out-of-boun...

8.2CVSS7AI score0.0072EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.5 views

PT-2025-29077

Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: A heap-buffer-overflow flaw exists in the template parsing logic within the certtool utility. The issue occurs when reading certain settings from a template file, potentially leading to an...

8.5CVSS7AI score0.01185EPSS
SaveExploits0References140
OSV
OSV
added 2024/10/18 11:9 a.m.5 views

OESA-2024-2263 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

5CVSS6.8AI score0.00386EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/09/03 12:0 a.m.14 views

EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2024-2326)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem...

5CVSS6.3AI score0.00386EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/09/03 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for gnutls (EulerOS-SA-2024-2306)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5CVSS6.2AI score0.00386EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/21 12:0 a.m.17 views

EulerOS Virtualization 2.11.0 : gnutls (EulerOS-SA-2024-2192)

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems lik...

5.3CVSS6.2AI score0.00718EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2024/08/20 12:0 a.m.20 views

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-2237)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the...

5CVSS6.3AI score0.00386EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/08/20 12:0 a.m.25 views

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2024-2213)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle using the...

5CVSS6.3AI score0.00386EPSS
SaveExploits0References2
Rows per page
Query Builder