According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that     handles PKCS#11 token initialization. When a token label longer than expected is processed, the function     writes past the end of a fixed-size stack buffer. This programming error can cause the application using     GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or     applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation     attacks.(CVE-2025-9820)

    A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership     handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the     type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not     own, leading to a double-free condition when the parent function or caller later attempts to free the same     structure.This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of     service or memory corruption, depending on allocator behavior.(CVE-2025-32988)

    A NULL pointer dereference flaw was found in the GnuTLS software in
    _gnutls_figure_common_ciphersuite().(CVE-2025-6395)

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system.(CVE-2025-32990)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gnutls-3.8.10-3.el9 build changelog.

  - A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central     Processing Unit) and memory consumption via specially crafted malicious certificates containing a large     number of name constraints and subject alternative names (SANs). (CVE-2025-14831)

  - A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that     handles PKCS#11 token initialization. When a token label longer than expected is processed, the function     writes past the end of a fixed-size stack buffer. This programming error can cause the application using     GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or     applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation     attacks. (CVE-2025-9820)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote host is prior to 3.8.11. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-324-01 advisory.

    New gnutls packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the gnutls security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:4346-1 advisory.

    - CVE-2025-9820: Fixed buffer overflow in gnutls_pkcs11_token_init. (bsc#1254132)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that     handles PKCS#11 token initialization. When a token label longer than expected is processed, the function     writes past the end of a fixed-size stack buffer. This programming error can cause the application using     GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or     applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation     attacks.(CVE-2025-9820)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to AHV-10.3.1.7. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.7 advisory.

  - Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS     backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version     2.42 can leak stack contents to the configured DNS resolver. (CVE-2026-0915)

  - pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found     that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This     vulnerability is fixed in 0.6.2. (CVE-2026-23490)

  - Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a     BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before     the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption which can have     various consequences including a Denial of Service. The OPENSSL_uni2utf8() function performs a two-pass     conversion of a PKCS#12 BMPString (UTF-16BE) to UTF-8. In the second pass, when emitting UTF-8 bytes, the     helper function bmp_to_utf8() incorrectly forwards the remaining UTF-16 source byte count as the     destination buffer capacity to UTF8_putc(). For BMP code points above U+07FF, UTF-8 requires three bytes,     but the forwarded capacity can be just two bytes. UTF8_putc() then returns -1, and this negative value is     added to the output length without validation, causing the length to become negative. The subsequent     trailing NUL byte is then written at a negative offset, causing write outside of heap allocated buffer.
    The vulnerability is reachable via the public PKCS12_get_friendlyname() API when parsing attacker-     controlled PKCS#12 files. While PKCS12_parse() uses a different code path that avoids this issue,     PKCS12_get_friendlyname() directly invokes the vulnerable function. Exploitation requires an attacker to     provide a malicious PKCS#12 file to be parsed by the application and the attacker can just trigger a one     zero byte write before the allocated buffer. For that reason the issue was assessed as Low severity     according to our Security Policy. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this     issue, as the PKCS#12 implementation is outside the OpenSSL FIPS module boundary. OpenSSL 3.6, 3.5, 3.4,     3.3, 3.0 and 1.1.1 are vulnerable to this issue. OpenSSL 1.0.2 is not affected by this issue.
    (CVE-2025-69419)

  - Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow     vulnerability exists in Vim's tag file resolution logic when processing the 'helpfile' option. The     vulnerability is located in the get_tagfname() function in src/tag.c. When processing help file tags, Vim     copies the user-controlled 'helpfile' option value into a fixed-size heap buffer of MAXPATHL + 1 bytes     (typically 4097 bytes) using an unsafe STRCPY() operation without any bounds checking. This issue has been     patched in version 9.1.2132. (CVE-2026-25749)

  - Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to     version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on     subsequent calls to wordfree may abort the process. (CVE-2025-15281)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-5585 advisory.

    [3.6.16-8.5]
    - Backport the fixes for CVE-2025-9820 and CVE-2025-14831

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gnutls-3.8.10-4.el9 build changelog.

  - A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons     of `nameConstraints` labels, specifically for `dNSName` (DNS) or `rfc822Name` (email) constraints within     `excludedSubtrees` or `permittedSubtrees`. A remote attacker can exploit this by crafting a leaf     certificate with casing differences in the Subject Alternative Name (SAN), leading to a policy bypass     where a certificate that should be rejected is instead accepted. This could result in unauthorized access     or information disclosure. (CVE-2026-3833)

  - A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that     handles PKCS#11 token initialization. When a token label longer than expected is processed, the function     writes past the end of a fixed-size stack buffer. This programming error can cause the application using     GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or     applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation     attacks. (CVE-2025-9820)

  - A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset,     leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is     remotely exploitable and may cause information disclosure or denial of service. (CVE-2026-33845)

  - A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The     issue arises in merge_handshake_packet() where incoming handshake fragments are matched and merged based     solely on handshake type, without validating that the message_length field remains consistent across all     fragments of the same logical message. An attacker can exploit this by sending crafted DTLS fragments with     conflicting message_length values, causing the implementation to allocate a buffer based on a smaller     initial fragment and subsequently write beyond its bounds using larger, inconsistent fragments. Because     the merge operation does not enforce proper bounds checking against the allocated buffer size, this     results in an out-of-bounds write on the heap. The vulnerability is remotely exploitable without     authentication via the DTLS handshake path and can lead to application crashes or potential memory     corruption. (CVE-2026-33846)

  - A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially     crafted Online Certificate Status Protocol (OCSP) response during a TLS handshake. Due to a logic error in     how gnutls processes multi-record OCSP responses, a client with OCSP verification enabled may incorrectly     accept a revoked server certificate, potentially leading to a compromise of trust. (CVE-2026-3832)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
302649	EulerOS Virtualization 2.12.0 : gnutls (EulerOS-SA-2026-1485)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	high
299202	CentOS 9 : gnutls-3.8.10-3.el9	Nessus	CentOS Local Security Checks	2026/2/16	2026/5/8	medium
276448	Slackware Linux 15.0 / current gnutls Vulnerability (SSA:2025-324-01)	Nessus	Slackware Local Security Checks	2025/11/20	2026/3/10	medium
278182	SUSE SLES12 Security Update : gnutls (SUSE-SU-2025:4346-1)	Nessus	SuSE Local Security Checks	2025/12/11	2026/2/24	medium
301574	EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2026-1239)	Nessus	Huawei Local Security Checks	2026/3/10	2026/3/10	medium
301607	EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2026-1275)	Nessus	Huawei Local Security Checks	2026/3/10	2026/3/10	medium
302717	EulerOS Virtualization 2.12.1 : gnutls (EulerOS-SA-2026-1428)	Nessus	Huawei Local Security Checks	2026/3/17	2026/3/17	high
310749	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.7)	Nessus	Misc.	2026/4/28	2026/4/28	medium
303499	Oracle Linux 8 : gnutls (ELSA-2026-5585)	Nessus	Oracle Linux Local Security Checks	2026/3/24	2026/5/8	medium
312106	CentOS 9 : gnutls-3.8.10-4.el9	Nessus	CentOS Local Security Checks	2026/5/4	2026/5/7	critical

检测

插件搜索

high

medium

medium

medium

medium

medium

high

medium

medium

critical