EUVD-2022-34767

Malicious code in bioql PyPI...

EUVD-2025-21000

Malicious code in bioql PyPI...

The vulnerability of the Transport Layer Security library GnuTLS, related to its algorithmic complexity, allows attackers to induce a service failure.

The vulnerability of the Transport Layer Security library GnuTLS is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ALSA-2025:16115 Moderate: gnutls security, bug fix, and enhancement update

The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Vulnerability in GnuTLS certtool template parsing CVE-2025-32990 gnutls: Vulnerability in GnuTLS SCT extension...

Ubuntu: Security Advisory (USN-7742-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : gnutls (EulerOS-SA-2025-2096)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain...

Linux Distros Unpatched Vulnerability : CVE-2025-32988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name SAN...

Linux Distros Unpatched Vulnerability : CVE-2023-0361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypt...

Amazon Linux 2 : gnutls (ALAS-2025-2969)

The version of gnutls installed on the remote host is prior to 3.3.29-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2969 advisory. A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility...

Huawei EulerOS: Security Advisory for libtasn1 (EulerOS-SA-2025-1730)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RockyLinux 8 : gnutls (RLSA-2025:4051)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:4051 advisory. gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS CVE-2024-12243 Tenable has extracted the preceding description block directl...

CBL Mariner 2.0 Security Update: gnutls (CVE-2025-32990)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32990 advisory. - A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within...

CBL Mariner 2.0 Security Update: gnutls (CVE-2025-6395)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6395 advisory. - A NULL pointer dereference flaw was found in the GnuTLS software in gnutlsfigurecommonciphersuite...

Azure Linux 3.0 Security Update: gnutls (CVE-2025-6395)

The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-6395 advisory. - A NULL pointer dereference flaw was found in the GnuTLS software in gnutlsfigurecommonciphersuite...

Azure Linux 3.0 Security Update: gnutls (CVE-2025-32988)

The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32988 advisory. - A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling...

NewStart CGSL MAIN 7.02 : gnutls Vulnerability (NS-SA-2025-0141)

The remote NewStart CGSL host, running version MAIN 7.02, has gnutls packages installed that are affected by a vulnerability: - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct PKCS1 v1.5...

Azure Linux 3.0 Security Update: gnutls (CVE-2025-32989)

The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory. - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency CT...

CBL Mariner 2.0 Security Update: gnutls (CVE-2025-32988)

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32988 advisory. - A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling...

The vulnerability of the `in_gnutls_figure_common_ciphersuite()` function in the GnuTLS library allows a attacker to corrupt memory and cause a service failure.

The vulnerability of the ingnutlsfigurecommonciphersuite function in the GnuTLS library is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to corrupt memory and cause service failures...

curl: GnuTLS CURLINFO_TLS_SESSION / CURLINFO_TLS_SSL_PTR type confusion

Summary: curleasygetinfo for CURLINFOTLSSESSION and CURLINFOTLSSSLPTR incorrectly return CURLSSLBACKENDOPENSSL in struct curltlssessioninfo backend field for GnuTLS. struct curltlssessioninfo curlsslbackend backend; void internals; ; The bug is at...