Fluid Attacks Database

Description

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 11	gnutls28	=3.7.1-5 \|\| =3.7.1-5+deb11u1 \|\| =3.7.1-5+deb11u2 \|\| =3.7.1-5+deb11u3 \|\| =3.7.1-5+deb11u4 \|\| =3.7.1-5+deb11u5 \|\| =3.7.1-5+deb11u6 \|\| =3.7.1-5+deb11u7 \|\| =3.7.1-5+deb11u8 \|\| >=0 <3.7.1-5+deb11u9	3.7.1-5+deb11u9
debian 12	gnutls28	=3.7.9-2 \|\| =3.7.9-2+deb12u1 \|\| =3.7.9-2+deb12u2 \|\| =3.7.9-2+deb12u3 \|\| =3.7.9-2+deb12u4 \|\| =3.7.9-2+deb12u5 \|\| >=0 <3.7.9-2+deb12u6	3.7.9-2+deb12u6
debian 13	gnutls28	=3.8.9-3 \|\| =3.8.9-3+deb13u1 \|\| >=0 <3.8.9-3+deb13u2	3.8.9-3+deb13u2
debian 14	gnutls28	=3.8.10-1 \|\| =3.8.10-2 \|\| =3.8.10-3 \|\| =3.8.11-1 \|\| =3.8.11-2 \|\| =3.8.11-3 \|\| =3.8.9-3 \|\| >=0 <3.8.12-1	3.8.12-1
alpine v3.20	gnutls	>=0 <3.8.12-r0	3.8.12-r0
alpine v3.21	gnutls	>=0 <3.8.12-r0	3.8.12-r0
alpine v3.22	gnutls	>=0 <3.8.12-r0	3.8.12-r0
alpine v3.23	gnutls	>=0 <3.8.12-r0	3.8.12-r0
rpm rhel7	gnutls	-	-
rpm rhel8	gnutls	<0:3.6.16-8.el8_10.5	0:3.6.16-8.el8_10.5

1-10 of 21

Aliases

1. CVE-2025-148312. NVD-2025-148313. OSV-DEBIAN-2025-148314. OSV-2025-148315. OSV-ALPINE-2025-148316. SECURITY-TRACKER-CVE-2025-148317. SECURITY-CVE-2025-14831

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.