Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-9820

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privileg
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6e371a065a404c82cff2b568aa5c6e114bbf6b8d2d0688d635dd1d255d58d887
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 25 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.6.16-8.el8_10.5","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/1

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/21

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-dashbuilder-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-3.1777325680","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/8

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-process-migration-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325680","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/10

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"defaultStatus":"affected","packageName":"rhceph/rhceph-8-rhel9","product":"Red Hat Ceph Storage 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1774002867","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/12

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/installer-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773668803","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/19

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325677","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.10-3.el10_1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/0

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-kieserver-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325709","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/9

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/rhua-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773670137","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/20

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"defaultStatus":"affected","packageName":"insights-proxy/insights-proxy-container-rhel9","product":"Red Hat Insights proxy 1.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773685509","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/16

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-ui-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1775675922","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"rhcos","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/23

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.3-10.el9_7","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/3

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773670073","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/17

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-controller-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325710","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.6.16-8.el8_10.5","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/2

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-businesscentral-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325711","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/22

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-server-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1775668717","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/13

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/haproxy-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773672059","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/18

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"gnutls-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.8.12-1.1.hum1","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.3-10.el9_7","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/4

{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-smartrouter-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325708","versionType":"rpm"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/11

{"defaultStatus":"unknown","product":"SIMATIC CN 4100","vendor":"Siemens","versions":[{"lessThan":"V5.0","status":"affected","version":"0","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/adp/2/affected/0

Affected products and versions

25 source assertions
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.6.16-8.el8_10.5","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/1
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/21
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-dashbuilder-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-3.1777325680","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/8
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-process-migration-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325680","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/10
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ceph_storage:8::el9"],"defaultStatus":"affected","packageName":"rhceph/rhceph-8-rhel9","product":"Red Hat Ceph Storage 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1774002867","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/12
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/installer-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773668803","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/19
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-businesscentral-monitoring-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325677","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/5
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.1"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.10-3.el10_1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/0
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-kieserver-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325709","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/9
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/rhua-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773670137","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/20
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:insights_proxy:1.5::el9"],"defaultStatus":"affected","packageName":"insights-proxy/insights-proxy-container-rhel9","product":"Red Hat Insights proxy 1.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773685509","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/16
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-ui-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1775675922","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/14
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"affected","packageName":"rhcos","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/23
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.3-10.el9_7","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/3
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773670073","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/17
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-controller-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325710","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/7
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.6.16-8.el8_10.5","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/2
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-businesscentral-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325711","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/6
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/22
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-server-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1775668717","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/13
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/haproxy-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1773672059","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/18
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"gnutls-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.8.12-1.1.hum1","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/15
{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"gnutls","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.8.3-10.el9_7","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/4
{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhosemc:1.0::el8"],"defaultStatus":"affected","packageName":"rhpam-7/rhpam-smartrouter-rhel8","product":"RHEL-8 based Middleware Containers","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"7.13.5-4.1777325708","versionType":"rpm"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/affected/11
{"defaultStatus":"unknown","product":"SIMATIC CN 4100","vendor":"Siemens","versions":[{"lessThan":"V5.0","status":"affected","version":"0","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/adp/2/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-121","description":"Stack-based Buffer Overflow","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/problemTypes/0/descriptions/0

Source references

16 source assertions
{"url":"http://www.openwall.com/lists/oss-security/2025/11/20/2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/adp/0/references/0
{"name":"RHSA-2026:13812","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:13812"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/0
{"name":"RHSA-2026:3477","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:3477"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/1
{"name":"RHSA-2026:4188","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4188"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/2
{"name":"RHSA-2026:4655","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4655"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/3
{"name":"RHSA-2026:4943","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:4943"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/4
{"name":"RHSA-2026:5585","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:5585"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/5
{"name":"RHSA-2026:5606","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:5606"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/6
{"name":"RHSA-2026:7329","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:7329"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/7
{"name":"RHSA-2026:7477","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:7477"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/8
{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2025-9820"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/9
{"name":"RHBZ#2392528","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2392528"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/10
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/adp/2/references/0
{"url":"https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/11
{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1732"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/12
{"url":"https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:50f24fd8c5928d8b3ef1b17fc07bd6538d61c191bce7e11d4a8d1709980d4fd9 · sha256:32bce2aedcfc4549… · /containers/cna/references/13

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer