CVE-2025-9820

{"id": "CVE-2025-9820", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.5}]}, "published": "2026-01-26T20:16:09.370", "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:3477", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4188", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4655", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4943", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:5585", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:5606", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:7329", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2026:7477", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-9820", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2392528", "source": "secalert@redhat.com"}, {"url": "https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5", "source": "secalert@redhat.com"}, {"url": "https://gitlab.com/gnutls/gnutls/-/issues/1732", "source": "secalert@redhat.com"}, {"url": "https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2025/11/20/2", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks."}, {"lang": "es", "value": "Se encontr\u00f3 una falla en la librer\u00eda GnuTLS, espec\u00edficamente en la funci\u00f3n gnutls_pkcs11_token_init() que maneja la inicializaci\u00f3n de tokens PKCS#11. Cuando se procesa una etiqueta de token m\u00e1s larga de lo esperado, la funci\u00f3n escribe m\u00e1s all\u00e1 del final de un b\u00fafer de pila de tama\u00f1o fijo. Este error de programaci\u00f3n puede causar que la aplicaci\u00f3n que usa GnuTLS se bloquee o, en ciertas condiciones, ser explotado para la ejecuci\u00f3n de c\u00f3digo. Como resultado, los sistemas o aplicaciones que dependen de GnuTLS pueden ser vulnerables a ataques de denegaci\u00f3n de servicio o escalada de privilegios local."}], "lastModified": "2026-04-22T02:16:01.607", "sourceIdentifier": "secalert@redhat.com"}