Description
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
Published: 2026-02-09
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4492-1 gnutls28 security update
Debian DSA Debian DSA DSA-6140-1 gnutls28 security update
Ubuntu USN Ubuntu USN USN-8043-1 GnuTLS vulnerabilities
Ubuntu USN Ubuntu USN USN-8502-1 GnuTLS vulnerabilities
References
Link Providers
https://access.redhat.com/errata/RHSA-2026:13812 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:16008 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:16009 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:16174 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:25096 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:30849 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:30850 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:33125 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:3477 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:4188 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:4655 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:4943 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:5585 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:5606 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:6618 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:6630 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:6737 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:6738 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:7329 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:7335 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:7477 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82347 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82354 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82372 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:82857 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:8746 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:8747 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2026:8748 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2025-14831 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2423177 cve-icon cve-icon
https://cert-portal.siemens.com/productcert/html/ssa-032379.html cve-icon
https://gitlab.com/gnutls/gnutls/-/issues/1773 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-14831 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-14831 cve-icon
History

Wed, 14 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
References

Wed, 14 Oct 2026 03:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat cert Manager
CPEs cpe:/a:redhat:cert_manager:1.18::el9
Vendors & Products Redhat cert Manager
References

Mon, 29 Jun 2026 23:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:rhivos:1 cpe:/a:redhat:rhel_aus:8.4::appstream
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
cpe:/o:redhat:rhel_aus:8.4::baseos
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos
Vendors & Products Redhat rhivos
References

Mon, 29 Jun 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Aus
Redhat rhel Eus Long Life
Redhat rhel Tus
CPEs cpe:/a:redhat:rhel_aus:8.6::appstream
cpe:/a:redhat:rhel_e4s:8.8::appstream
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream
cpe:/a:redhat:rhel_tus:8.8::appstream
cpe:/o:redhat:rhel_aus:8.6::baseos
cpe:/o:redhat:rhel_e4s:8.8::baseos
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos
cpe:/o:redhat:rhel_tus:8.8::baseos
Vendors & Products Redhat rhel Aus
Redhat rhel Eus Long Life
Redhat rhel Tus
References

Thu, 25 Jun 2026 03:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhivos
CPEs cpe:/o:redhat:rhivos:1
Vendors & Products Redhat rhivos

Wed, 10 Jun 2026 18:15:00 +0000

Type Values Removed Values Added
References

Thu, 14 May 2026 23:00:00 +0000

Type Values Removed Values Added
References

Tue, 12 May 2026 13:30:00 +0000

Type Values Removed Values Added
References

Tue, 12 May 2026 09:30:00 +0000

Type Values Removed Values Added
References

Tue, 05 May 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhosemc
CPEs cpe:/a:redhat:rhosemc:1.0::el8
Vendors & Products Redhat rhosemc
References

Wed, 22 Apr 2026 18:30:00 +0000

Type Values Removed Values Added
References

Fri, 17 Apr 2026 13:45:00 +0000

Type Values Removed Values Added
References

Fri, 17 Apr 2026 11:45:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:ai_inference_server:3.3::el9
References

Thu, 09 Apr 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat ai Inference Server
CPEs cpe:/a:redhat:ai_inference_server:3.2::el9
Vendors & Products Redhat ai Inference Server
References

Thu, 09 Apr 2026 15:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat discovery
CPEs cpe:/a:redhat:discovery:2::el9
Vendors & Products Redhat discovery
References

Tue, 07 Apr 2026 18:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat hummingbird
CPEs cpe:/a:redhat:hummingbird:1
Vendors & Products Redhat hummingbird

Tue, 07 Apr 2026 11:30:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_eus:9.4::appstream
cpe:/o:redhat:rhel_eus:9.4::baseos
References

Tue, 07 Apr 2026 08:15:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.2::appstream
cpe:/o:redhat:rhel_e4s:9.2::baseos
Vendors & Products Redhat rhel E4s
References

Mon, 06 Apr 2026 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Redhat enterprise Linux Eus
CPEs cpe:/o:redhat:enterprise_linux_eus:10.0
Vendors & Products Redhat enterprise Linux Eus
References

Mon, 06 Apr 2026 08:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/a:redhat:rhel_eus:9.6::appstream
cpe:/o:redhat:rhel_eus:9.6::baseos
Vendors & Products Redhat rhel Eus
References

Tue, 24 Mar 2026 11:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:8::appstream
cpe:/o:redhat:enterprise_linux:8::baseos
References

Tue, 24 Mar 2026 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Redhat ceph Storage
CPEs cpe:/a:redhat:ceph_storage:8::el9
Vendors & Products Redhat ceph Storage
References

Wed, 18 Mar 2026 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat rhui
CPEs cpe:/a:redhat:rhui:5::el9
Vendors & Products Redhat rhui
References

Mon, 16 Mar 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Redhat insights Proxy
CPEs cpe:/a:redhat:insights_proxy:1.5::el9
Vendors & Products Redhat insights Proxy
References

Thu, 12 Mar 2026 17:45:00 +0000

Type Values Removed Values Added
References

Wed, 11 Mar 2026 09:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:9 cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/o:redhat:enterprise_linux:9::baseos
References

Mon, 02 Mar 2026 17:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:10.1
References

Tue, 10 Feb 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Red Hat
Red Hat enterprise Linux
Redhat openshift Container Platform
Vendors & Products Red Hat
Red Hat enterprise Linux
Redhat openshift Container Platform

Tue, 10 Feb 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Mon, 09 Feb 2026 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 09 Feb 2026 15:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
Title Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
First Time appeared Redhat
Redhat enterprise Linux
Redhat openshift
Weaknesses CWE-407
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat openshift
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}

Subscriptions

Red Hat Enterprise Linux
Redhat Ai Inference Server Ceph Storage Cert Manager Discovery Enterprise Linux Enterprise Linux Eus Hummingbird Insights Proxy Openshift Openshift Container Platform Rhel Aus Rhel E4s Rhel Eus Rhel Eus Long Life Rhel Tus Rhosemc Rhui
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-10-14T19:31:33.894Z

Reserved: 2025-12-17T14:44:59.859Z

Link: CVE-2025-14831

cve-icon Vulnrichment

Updated: 2026-05-12T12:02:57.683Z

cve-icon NVD

Status : Deferred

Published: 2026-02-09T15:16:09.937

Modified: 2026-10-14T20:17:25.107

Link: CVE-2025-14831

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-02-09T14:26:34Z

Links: CVE-2025-14831 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-20T15:45:10Z

Weaknesses