CVE-2025-32989

EUVD-2025-20927
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS verifies certificates from certain websites when the certificate (SCT) is not checked correctly.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
Affected Products (NVD)
VendorProductVersion
gnugnutls
-
redhatopenshift_container_platform
4.0
redhatenterprise_linux
6.0
redhatenterprise_linux
7.0
redhatenterprise_linux
8.0
redhatenterprise_linux
9.0
redhatenterprise_linux
10.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
SiemensSIMATIC S7-1500 CPU 1518-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIMATIC S7-1500 CPU 1518-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
SiemensSIPLUS S7-1500 CPU 1518-4 PN\/DP MFP
V3.1.5 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
gnutls28
bookworm
3.7.9-2+deb12u6
fixed
bookworm (security)
3.7.9-2+deb12u7
fixed
bullseye
3.7.1-5+deb11u5
fixed
bullseye (security)
3.7.1-5+deb11u10
fixed
forky
3.8.13-1
fixed
sid
3.8.13-1
fixed
trixie
3.8.9-3+deb13u3
fixed
trixie (security)
3.8.9-3+deb13u4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gnutls28
bionic
not-affected
focal
not-affected
jammy
Fixed 3.7.3-4ubuntu1.7
released
noble
Fixed 3.8.3-1.1ubuntu3.4
released
oracular
ignored
plucky
Fixed 3.8.9-2ubuntu3.1
released
questing
Fixed 3.8.9-3ubuntu1
released
resolute
Fixed 3.8.9-3ubuntu1
released
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
gnutls
suse enterprise desktop 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise desktop 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.9.1
fixed
gnutls-guile
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
libgnutls-devel
suse enterprise desktop 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise desktop 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.9.1
fixed
libgnutls30
suse enterprise desktop 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise desktop 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.9.1
fixed
libgnutls30-32bit
suse enterprise desktop 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise desktop 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.9.1
fixed
libgnutls30-hmac
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
libgnutls30-hmac-32bit
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
libgnutlsxx-devel
suse enterprise desktop 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise desktop 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.9.1
fixed
libgnutlsxx28
suse enterprise server 15 SP4
3.7.3-150400.4.50.1
fixed
suse enterprise server 15 SP5
3.7.3-150400.4.50.1
fixed
libgnutlsxx30
suse enterprise desktop 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise desktop 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise sap 15 SP7
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP6
3.8.3-150600.4.9.1
fixed
suse enterprise server 15 SP7
3.8.3-150600.4.9.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
gnutls
RHEL 9
0:3.8.3-6.el9_6.2
fixed
gnutls-c
RHEL 9
0:3.8.3-6.el9_6.2
fixed
gnutls-dane
RHEL 9
0:3.8.3-6.el9_6.2
fixed
gnutls-devel
RHEL 9
0:3.8.3-6.el9_6.2
fixed
gnutls-utils
RHEL 9
0:3.8.3-6.el9_6.2
fixed
Common Weakness Enumeration
References
https://access.redhat.com/errata/RHSA-2025:16115
https://access.redhat.com/errata/RHSA-2025:16116
https://access.redhat.com/errata/RHSA-2025:17181
https://access.redhat.com/errata/RHSA-2025:17348
https://access.redhat.com/errata/RHSA-2025:17361
https://access.redhat.com/errata/RHSA-2025:19088
https://access.redhat.com/errata/RHSA-2025:22529
https://access.redhat.com/errata/RHSA-2026:7477
https://access.redhat.com/security/cve/CVE-2025-32989
https://bugzilla.redhat.com/show_bug.cgi?id=2359621
https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html
http://www.openwall.com/lists/oss-security/2025/07/11/3
https://cert-portal.siemens.com/productcert/html/ssa-082556.html