The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2025:02521-1 advisory.

    - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02583-1 advisory.

    - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
    - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries     containing an otherName (bsc#1246232)
    - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02595-1 advisory.

    - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
    - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries     containing an otherName (bsc#1246232)
    - CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate     parsing (bsc#1246233)
    - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership     handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the     type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not     own, leading to a double-free condition when the parent function or caller later attempts to free the same     structure.

    This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or     memory corruption, depending on allocator behavior.(CVE-2025-32988)

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system.(CVE-2025-32990)

    A NULL pointer dereference flaw was found in the GnuTLS software in
    _gnutls_figure_common_ciphersuite().(CVE-2025-6395)

    A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient     algorithm in libtasn1, decoding certain DER-encoded certificate data can take excessive time, leading to     increased resource consumption. This flaw allows a remote attacker to send a specially crafted     certificate, causing GnuTLS to become unresponsive or slow, resulting in a denial-of-service     condition.(CVE-2024-12243)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.3.1.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.2 advisory.

  - A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system. (CVE-2025-32990)

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

  - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1551 contains a patch for the vulnerability. (CVE-2025-53906)

  - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle     attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how     OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be     considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning     the attack complexity high. (CVE-2025-26465)

  - Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was     introduced which means that the entire temporary file is read into memory and then logged. An attacker     might be able to exploit this to cause a denial of service attack by causing an out of memory exception.
    In addition, it is possible to configure CXF to encrypt temporary files to prevent sensitive credentials     from being cached unencrypted on the local filesystem, however this bug means that the cached files are     written out to logs unencrypted. Users are recommended to upgrade to versions 3.5.11, 3.6.6, 4.0.7 or     4.1.1, which fixes this issue. (CVE-2025-48795)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-814d6183dd advisory.

    This updates gnutls to the latest upstream release. Notable changes are:

    * PKCS#11 cryptographic provider support
    * Support for kTLS rekeying with kernel 6.14+
    * Support for the almost standardized ML-DSA private key formats

    This also fixes 4 CVEs.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the gnutls package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02589-1 advisory.

    - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
    - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries     containing an otherName (bsc#1246232)
    - CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate     parsing (bsc#1246233)
    - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4267 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4267-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     August 09, 2025                               https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : gnutls28     Version        : 3.7.1-5+deb11u8     CVE ID         : CVE-2025-6395 CVE-2025-32988 CVE-2025-32990

    Multiple vulnerabilities have been fixed in GnuTLS, a library     implementing the SSL, TLS and DTLS protocols.

    CVE-2025-6395

        NULL dereference when 2nd Client Hello omits PSK

    CVE-2025-32988

        Double-free upon error when exporting otherName in SAN

    CVE-2025-32990

        1-byte write buffer overrun in certtool

    For Debian 11 bullseye, these problems have been fixed in version     3.7.1-5+deb11u8.

    We recommend that you upgrade your gnutls28 packages.

    For the detailed security status of gnutls28 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gnutls28

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16116 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17361 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243)

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0814 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-6395:
    A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

    CVE-2025-32988:
    A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership     handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the     type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not     own, leading to a double-free condition when the parent function or caller later attempts to free the same     structure.

    This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or     memory corruption, depending on allocator behavior.

    CVE-2025-32990:
    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system.(CVE-2025-32990)

    A NULL pointer dereference flaw was found in the GnuTLS software in
    _gnutls_figure_common_ciphersuite().(CVE-2025-6395)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990961 advisory.

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-10868:03 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AHV installed on the remote host is prior to 10.0.1.6 / AHV-10.0.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.0.1.6 advisory.

  - A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system. (CVE-2025-32990)

  - A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership     handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the     type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not     own, leading to a double-free condition when the parent function or caller later attempts to free the same     structure. This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of     service or memory corruption, depending on allocator behavior. (CVE-2025-32988)

  - A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
    (CVE-2025-6395)

  - Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in     Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially crafted tar archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1552 contains a patch for the vulnerability. (CVE-2025-53905)

  - Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in     Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives.
    Impact is low because this exploit requires direct user interaction. However, successfully exploitation     can lead to overwriting sensitive files or placing executable code in privileged locations, depending on     the permissions of the process editing the archive. The victim must edit such a file using Vim which will     reveal the filename and the file content, a careful user may suspect some strange things going on.
    Successful exploitation could results in the ability to execute arbitrary commands on the underlying     operating system. Version 9.1.1551 contains a patch for the vulnerability. (CVE-2025-53906)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
242868	SUSE SLES12 Security Update : gnutls (SUSE-SU-2025:02521-1)	Nessus	SuSE Local Security Checks	2025/7/26	2025/7/26	medium
243267	SUSE SLES15: gnutls / libgnutls-devel / libgnutls-devel-32bit / libgnutls30 / etc (SUSE-SU-2025:02583-1)	Nessus	SuSE Local Security Checks	2025/8/1	2026/6/25	high
243296	SUSE SLED15: gnutls / libgnutls-devel / libgnutls-devel-32bit / libgnutls30 / etc (SUSE-SU-2025:02595-1)	Nessus	SuSE Local Security Checks	2025/8/2	2026/6/25	high
297290	EulerOS Virtualization 2.10.0 : gnutls (EulerOS-SA-2026-1169)	Nessus	Huawei Local Security Checks	2026/1/31	2026/1/31	high
277073	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.2)	Nessus	Misc.	2025/12/2	2026/5/27	high
242094	Fedora 41 : gnutls (2025-814d6183dd)	Nessus	Fedora Local Security Checks	2025/7/15	2025/7/15	medium
242667	Photon OS 5.0: Gnutls PHSA-2025-5.0-0561	Nessus	PhotonOS Local Security Checks	2025/7/24	2025/7/24	medium
243300	SUSE SLES15: gnutls / gnutls-guile / libgnutls-devel / libgnutls30 / etc (SUSE-SU-2025:02589-1)	Nessus	SuSE Local Security Checks	2025/8/2	2026/6/26	high
247128	Debian dla-4267 : gnutls-bin - security update	Nessus	Debian Local Security Checks	2025/8/9	2025/8/9	medium
265352	RHEL 9 : gnutls (RHSA-2025:16116)	Nessus	Red Hat Local Security Checks	2025/9/17	2025/9/17	high
266624	RHEL 9 : gnutls (RHSA-2025:17361)	Nessus	Red Hat Local Security Checks	2025/10/6	2025/10/6	high
271114	TencentOS Server 3: gnutls (TSSA-2025:0814)	Nessus	Tencent Local Security Checks	2025/10/22	2025/12/4	high
271299	EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2025-2259)	Nessus	Huawei Local Security Checks	2025/10/24	2025/10/24	high
276694	Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gnutls (UTSA-2025-990961)	Nessus	Unity Linux Local Security Checks	2025/11/25	2025/11/25	high
283444	MiracleLinux 9 : gnutls-3.8.3-6.el9_6.2 (AXSA:2025-10868:03)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	high
303852	Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.0.1.6)	Nessus	Misc.	2026/3/26	2026/7/15	high

检测

插件搜索

medium

high

high

high

high

medium

medium

high

medium

high

high

high

high

high

high

high