Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-9820— Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Quick assessment

Affected
CVE-2025-9820
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

GnuTLS是GnuTLS开源的一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。 GnuTLS存在安全漏洞，该漏洞源于gnutls_pkcs11_token_init函数存在栈缓冲区溢出，可能导致拒绝服务或本地权限提升。

CVSS 4.0 · Medium EPSS 0.21% · P11

Affected Version Matrix 34

VendorProduct Version RangeStatus
None None 3.8.1 affected
3.8.2 affected
3.8.3 affected
3.8.4 affected
3.8.5 affected
3.8.6 affected
3.8.7 affected
3.8.8 affected
… +2 more rows
Red Hat Red Hat Ceph Storage 8 1774002867< * unaffected
Red Hat Red Hat Discovery 2 1775668717< * unaffected
1775675922< * unaffected
Red Hat Red Hat Enterprise Linux 10 0:3.8.10-3.el10_1< * unaffected
Red Hat Red Hat Enterprise Linux 6 any affected
Red Hat Red Hat Enterprise Linux 7 any affected
Red Hat Red Hat Enterprise Linux 8 0:3.6.16-8.el8_10.5< * unaffected
0:3.6.16-8.el8_10.5< * unaffected
Red Hat Red Hat Enterprise Linux 9 0:3.8.3-10.el9_7< * unaffected
0:3.8.3-10.el9_7< * unaffected
Red Hat Red Hat Hardened Images 3.8.12-1.1.hum1< * unaffected
Red Hat Red Hat Insights proxy 1.5 1773685509< * unaffected
Red Hat Red Hat OpenShift Container Platform 4 any affected
Red Hat Red Hat Update Infrastructure 5 1773670073< * unaffected
1773672059< * unaffected
1773668803< * unaffected
1773670137< * unaffected
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325677< * unaffected
7.13.5-4.1777325711< * unaffected
7.13.5-4.1777325710< * unaffected
7.13.5-3.1777325680< * unaffected
7.13.5-4.1777325709< * unaffected
7.13.5-4.1777325680< * unaffected
7.13.5-4.1777325708< * unaffected

I. Basic Information for CVE-2025-9820

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
GnuTLS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GnuTLS是GnuTLS开源的一款免费的用于实现SSL、TLS和DTLS协议的安全通信库。 GnuTLS存在安全漏洞，该漏洞源于gnutls_pkcs11_token_init函数存在栈缓冲区溢出，可能导致拒绝服务或本地权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 3.8.1 -
Red Hat Red Hat Enterprise Linux 10 0:3.8.10-3.el10_1 ~ * cpe:/o:redhat:enterprise_linux:10.1
Red Hat Red Hat Enterprise Linux 8 0:3.6.16-8.el8_10.5 ~ * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat Red Hat Enterprise Linux 8 0:3.6.16-8.el8_10.5 ~ * cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat Red Hat Enterprise Linux 9 0:3.8.3-10.el9_7 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat Red Hat Enterprise Linux 9 0:3.8.3-10.el9_7 ~ * cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325677 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325711 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325710 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat RHEL-8 based Middleware Containers 7.13.5-3.1777325680 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325709 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325680 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat RHEL-8 based Middleware Containers 7.13.5-4.1777325708 ~ * cpe:/a:redhat:rhosemc:1.0::el8
Red Hat Red Hat Ceph Storage 8 1774002867 ~ * cpe:/a:redhat:ceph_storage:8::el9
Red Hat Red Hat Discovery 2 1775668717 ~ * cpe:/a:redhat:discovery:2::el9
Red Hat Red Hat Discovery 2 1775675922 ~ * cpe:/a:redhat:discovery:2::el9
Red Hat Red Hat Hardened Images 3.8.12-1.1.hum1 ~ * cpe:/a:redhat:hummingbird:1
Red Hat Red Hat Insights proxy 1.5 1773685509 ~ * cpe:/a:redhat:insights_proxy:1.5::el9
Red Hat Red Hat Update Infrastructure 5 1773670073 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1773672059 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1773668803 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Update Infrastructure 5 1773670137 ~ * cpe:/a:redhat:rhui:5::el9
Red Hat Red Hat Enterprise Linux 6 - cpe:/o:redhat:enterprise_linux:6
Red Hat Red Hat Enterprise Linux 7 - cpe:/o:redhat:enterprise_linux:7
Red Hat Red Hat OpenShift Container Platform 4 - cpe:/a:redhat:openshift:4

II. Public POCs for CVE-2025-9820

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-9820

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-9820 (1)

Vendor Advisories for CVE-2025-9820 (7)

IV. Related Vulnerabilities

Same weakness: CWE-121

V. Comments for CVE-2025-9820

No comments yet

Leave a comment