Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog
Консоль
Π›ΠΎΠ³ΠΎΡ‚ΠΈΠΏ exploitDog

exploitDog

ubuntu Π»ΠΎΠ³ΠΎΡ‚ΠΈΠΏ

CVE-2025-9820

ΠžΠΏΡƒΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ: 26 янв. 2026
Π˜ΡΡ‚ΠΎΡ‡Π½ΠΈΠΊ: ubuntu
ΠŸΡ€ΠΈΠΎΡ€ΠΈΡ‚Π΅Ρ‚: low
EPSS Низкий
CVSS3: 4

ОписаниС

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

Π Π΅Π»ΠΈΠ·Π‘Ρ‚Π°Ρ‚ΡƒΡΠŸΡ€ΠΈΠΌΠ΅Ρ‡Π°Π½ΠΈΠ΅
devel

not-affected

3.8.12-2ubuntu1
esm-infra-legacy/xenial

released

3.4.10-4ubuntu1.9+esm3
esm-infra/bionic

released

3.5.18-1ubuntu1.6+esm3
esm-infra/focal

released

3.6.13-2ubuntu1.12+esm2
esm-infra/xenial

ignored

end of ESM support, was needs-triage
fips-preview/jammy

needs-triage

fips-updates/jammy

released

3.7.3-4ubuntu1.8+Fips1.1
fips-updates/noble

released

3.8.3-1.1ubuntu3.5+Fips1.1
jammy

released

3.7.3-4ubuntu1.8
noble

released

3.8.3-1.1ubuntu3.5

ΠŸΠΎΠΊΠ°Π·Ρ‹Π²Π°Ρ‚ΡŒ ΠΏΠΎ

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 11%
0.00203
Низкий

4 Medium

CVSS3

БвязанныС уязвимости

CVSS3: 4
redhat
9 мСсяцСв Π½Π°Π·Π°Π΄

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

CVSS3: 4
nvd
6 мСсяцСв Π½Π°Π·Π°Π΄

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.

CVSS3: 4
debian
6 мСсяцСв Π½Π°Π·Π°Π΄

A flaw was found in the GnuTLS library, specifically in the gnutls_pkc ...

suse-cvrf
8 мСсяцСв Π½Π°Π·Π°Π΄

Security update for gnutls

suse-cvrf
8 мСсяцСв Π½Π°Π·Π°Π΄

Security update for gnutls

EPSS

ΠŸΡ€ΠΎΡ†Π΅Π½Ρ‚ΠΈΠ»ΡŒ: 11%
0.00203
Низкий

4 Medium

CVSS3

Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡ‚ΡŒ CVE-2025-9820