Riskcovery

CVE-2025-32988

Gnutls: vulnerability in gnutls othername san export

State
Published
Severity
6.5 Medium
Published
Jul 10, 2025
Updated
Oct 15, 2026
Reserved
Apr 15, 2025

Read the record on cve.org

Description

A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not own, leading to a double-free condition when the parent function or caller later attempts to free the same structure.

This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or memory corruption, depending on allocator behavior.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:Hredhat

Weaknesses

Affected Products

ProductVersions
libgnutls
  • before 3.8.10Affected
Red Hat Enterprise Linux 10Red Hat
  • 0:3.8.9-9.el10_0.14 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:3.6.16-8.el8_10.4 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:3.6.16-8.el8_10.4 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:3.8.3-6.el9_6.2 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:3.8.3-6.el9_6.2 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat
  • 0:3.7.6-21.el9_2.4 and laterNot affected
Red Hat Enterprise Linux 9.4 Extended Update SupportRed Hat
  • 0:3.8.3-4.el9_4.4 and laterNot affected
Red Hat Ceph Storage 7Red Hat
  • 7 and laterNot affected
Red Hat Discovery 2Red Hat
  • 2.3.0-1760554384 and laterNot affected
Red Hat Hardened ImagesRed Hat
  • 3.8.12-1.1.hum1 and laterNot affected
Red Hat Insights proxy 1.5Red Hat
  • 1.5.7-1759331989 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
    Red Hat Enterprise Linux 7Red Hat
      Red Hat OpenShift Container Platform 4Red Hat
        Red Hat OpenShift Container Platform 4Red Hat

          References

          Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.