VDB
BDU%3A2025-15388
BDU%3A2025-15388
PUBLISHED
CVSS 7.199999809265137 HIGH
Уязвимость функции gnutls_pkcs11_token_init() (lib/pkcs11_write.c) библиотеки GnuTLS, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.199999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, АО «ИВК», Fedora Project, Free Software Foundation, Inc. | Suse Linux Enterprise Desktop, SUSE Linux Enterprise Server for SAP Applications, OpenSUSE Leap, Suse Linux Enterprise Server, Debian GNU/Linux, openSUSE Leap Micro, АЛЬТ СП 10, SUSE Linux Micro, Fedora, GnuTLS |
Timeline
- Dec 8, 2025 CVE Published
- Dec 26, 2025 CVE Updated
References
- https://gitlab.com/gnutls/gnutls/-/issues/1732 url
- https://gitlab.com/gnutls/gnutls/-/commit/1d56f96f6ab5034d677136b9d50b5a75dff0faf5 url
- https://www.cybersecurity-help.cz/vulnerabilities/118650/ url
- https://altsp.su/obnovleniya-bezopasnosti/ url
- https://security-tracker.debian.org/tracker/CVE-2025-9820 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KETTG4V5TV3CDZVJRFFLIAEJ5R66OCR7/ advisory
- https://www.wiz.io/vulnerability-database/cve/cve-2025-9820 url
- https://www.suse.com/security/cve/CVE-2025-9820.html url
- https://www.gnutls.org/security-new.html#GNUTLS-SA-2025-11-18 advisory