支持本站 — 捐款将帮助我们持续运营

目标: 1000 元，已筹: 1000 元

100.0%
立即捐款
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2025-14831 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
来源: 美国国家漏洞数据库 NVD
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
算法复杂性
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
GnuTLS 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
GnuTLS是GnuTLS开源的一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。 GnuTLS存在安全漏洞，该漏洞源于处理特制恶意证书时消耗过多CPU和内存，可能导致拒绝服务。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
厂商产品影响版本CPE订阅
Red HatRed Hat Enterprise Linux 10 0:3.8.10-3.el10_1 ~ * cpe:/o:redhat:enterprise_linux:10.1
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support 0:3.8.9-9.el10_0.17 ~ * cpe:/o:redhat:enterprise_linux_eus:10.0
Red HatRed Hat Enterprise Linux 8 0:3.6.16-8.el8_10.5 ~ * cpe:/a:redhat:enterprise_linux:8::appstream
Red HatRed Hat Enterprise Linux 8 0:3.6.16-8.el8_10.5 ~ * cpe:/a:redhat:enterprise_linux:8::appstream
Red HatRed Hat Enterprise Linux 9 0:3.8.3-10.el9_7 ~ * cpe:/o:redhat:enterprise_linux:9::baseos
Red HatRed Hat Enterprise Linux 9 0:3.8.3-10.el9_7 ~ * cpe:/o:redhat:enterprise_linux:9::baseos
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:3.7.6-21.el9_2.5 ~ * cpe:/a:redhat:rhel_e4s:9.2::appstream
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support 0:3.8.3-4.el9_4.5 ~ * cpe:/a:redhat:rhel_eus:9.4::appstream
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support 0:3.8.3-6.el9_6.3 ~ * cpe:/a:redhat:rhel_eus:9.6::appstream
Red HatRed Hat AI Inference Server 3.2 sha256:54616c9f3e4d27120504b0b2020432ef3ff85286a50de7be842f05df0cfcd69e ~ * cpe:/a:redhat:ai_inference_server:3.2::el9
Red HatRed Hat AI Inference Server 3.3 sha256:0ec114881d9dcd28a5dbbb2ec0ea1301ad87d5ae133121ce8167ef29d19802cc ~ * cpe:/a:redhat:ai_inference_server:3.3::el9
Red HatRed Hat AI Inference Server 3.3 sha256:813ba7ccd1696b44deb90d9e6cd8af114bdb47781eae7f27246a81fba062a892 ~ * cpe:/a:redhat:ai_inference_server:3.3::el9
Red HatRed Hat AI Inference Server 3.3 sha256:be6d568f28044533e4ad80f0856407c359e2eaf31a6b89cada433e6575d2300e ~ * cpe:/a:redhat:ai_inference_server:3.3::el9
Red HatRed Hat Ceph Storage 8 sha256:1160569002c25d3d349bbe41b57eeffade438853d3419edca01813227440f414 ~ * cpe:/a:redhat:ceph_storage:8::el9
Red HatRed Hat Discovery 2 sha256:040dadd657afdb9f0914f896a4962fd3dbf40b70c8037e4d72b6801b766c9b7d ~ * cpe:/a:redhat:discovery:2::el9
Red HatRed Hat Discovery 2 sha256:062310de4b34e278f8c7e4634def673a77d1228d493541ef1264ba4cb83b68eb ~ * cpe:/a:redhat:discovery:2::el9
Red HatRed Hat Hardened Images 3.8.12-1.1.hum1 ~ * cpe:/a:redhat:hummingbird:1
Red HatRed Hat Insights proxy 1.5 sha256:325c34e2506d715975171557d40afb449c79cf6e0c41b35760977d5cafb827b8 ~ * cpe:/a:redhat:insights_proxy:1.5::el9
Red HatRed Hat Update Infrastructure 5 sha256:200c27e9b396276bd505c6b41127ac5eb1d94d620172cb818ae733f2a21ac524 ~ * cpe:/a:redhat:rhui:5::el9
Red HatRed Hat Update Infrastructure 5 sha256:d98fd3fe5f5f9acd0efae7db19b61b864be1eb2fbe2586a1b6be2429fa2cc7a3 ~ * cpe:/a:redhat:rhui:5::el9
Red HatRed Hat Update Infrastructure 5 sha256:2c50c87906a1abebf427a70f401c409f1258cb55d2096f517db870ec991cfd7f ~ * cpe:/a:redhat:rhui:5::el9
Red HatRed Hat Update Infrastructure 5 sha256:5f1fbf66fb349a7baf066a1216d39989c3b89f18ec5108b96d9643baf4856778 ~ * cpe:/a:redhat:rhui:5::el9
Red HatRed Hat Enterprise Linux 6-cpe:/o:redhat:enterprise_linux:6
Red HatRed Hat Enterprise Linux 7-cpe:/o:redhat:enterprise_linux:7
Red HatRed Hat OpenShift Container Platform 4-cpe:/a:redhat:openshift:4
二、漏洞 CVE-2025-14831 的公开POC
#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC
三、漏洞 CVE-2025-14831 的情报信息
Please 登录 to view more intelligence information
四、漏洞 CVE-2025-14831 的评论

暂无评论

发表评论