Skip to content
Heist/ feed
Medium

Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification

Type: advisorySource: Official CVE List1 source record

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

Announced Group revision 1
Original source ↗

CVE-2025-14831

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-14831

Red Hat Enterprise Linux 10

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 10.0 Extended Update Support

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9.4 Extended Update Support

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 9.6 Extended Update Support

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/24/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/25/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/26/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/27/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/28/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/29/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/30/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/31/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/32/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Cert Manager support for Red Hat OpenShift release 1.18

Source reference: /containers/cna/affected/33/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.2

Source reference: /containers/cna/affected/34/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.2

Source reference: /containers/cna/affected/35/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.3

Source reference: /containers/cna/affected/36/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.3

Source reference: /containers/cna/affected/37/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.3

Source reference: /containers/cna/affected/38/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.3

Source reference: /containers/cna/affected/39/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.3

Source reference: /containers/cna/affected/40/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat AI Inference Server 3.3

Source reference: /containers/cna/affected/41/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Ceph Storage 8

Source reference: /containers/cna/affected/42/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Discovery 2

Source reference: /containers/cna/affected/43/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Discovery 2

Source reference: /containers/cna/affected/44/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Hardened Images

Source reference: /containers/cna/affected/45/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Insights proxy 1.5

Source reference: /containers/cna/affected/46/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/47/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/48/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/49/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Update Infrastructure 5

Source reference: /containers/cna/affected/50/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 6

Source reference: /containers/cna/affected/51/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Enterprise Linux 7

Source reference: /containers/cna/affected/52/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/53/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat OpenShift Container Platform 4

Source reference: /containers/cna/affected/54/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://gitlab.com/gnutls/gnutls"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:10.1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.8.10-3.el10_1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux_eus:10.0"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.8.9-9.el10_0.17",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.16-8.el8_10.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:8::appstream",
      "cpe:/o:redhat:enterprise_linux:8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.16-8.el8_10.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.14-10.el8_4.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13-3.el8_4.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libtasn1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.14-10.el8_4.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.4::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
      "cpe:/o:redhat:rhel_aus:8.4::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13-3.el8_4.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libtasn1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.16-5.el8_6.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13-3.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libtasn1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.16-5.el8_6.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_aus:8.6::appstream",
      "cpe:/a:redhat:rhel_eus_long_life:8.6::appstream",
      "cpe:/o:redhat:rhel_aus:8.6::baseos",
      "cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13-3.el8_6.2",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libtasn1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.16-7.el8_8.4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13-4.el8_8.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libtasn1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.6.16-7.el8_8.4",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:8.8::appstream",
      "cpe:/a:redhat:rhel_tus:8.8::appstream",
      "cpe:/o:redhat:rhel_e4s:8.8::baseos",
      "cpe:/o:redhat:rhel_tus:8.8::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:4.13-4.el8_8.1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "libtasn1",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.8.3-10.el9_7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:enterprise_linux:9::appstream",
      "cpe:/o:redhat:enterprise_linux:9::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.8.3-10.el9_7",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_e4s:9.2::appstream",
      "cpe:/o:redhat:rhel_e4s:9.2::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.7.6-21.el9_2.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.4::appstream",
      "cpe:/o:redhat:rhel_eus:9.4::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.8.3-4.el9_4.5",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhel_eus:9.6::appstream",
      "cpe:/o:redhat:rhel_eus:9.6::baseos"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
    "versions": [
      {
        "status": "unaffected",
        "version": "0:3.8.3-6.el9_6.3",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1777325677",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1777325711",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-businesscentral-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1777325710",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-controller-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-3.1777325680",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1777325709",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-kieserver-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1777325680",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-process-migration-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhosemc:1.0::el8"
    ],
    "vendor": "Red Hat",
    "product": "RHEL-8 based Middleware Containers",
    "versions": [
      {
        "status": "unaffected",
        "version": "7.13.5-4.1777325708",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhpam-7/rhpam-smartrouter-rhel8",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "1791459707",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cert-manager/jetstack-cert-manager-acmesolver-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "1791459711",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cert-manager/jetstack-cert-manager-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "1791459759",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cert-manager/cert-manager-istio-csr-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "1789029076",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cert-manager/cert-manager-operator-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:cert_manager:1.18::el9"
    ],
    "vendor": "Red Hat",
    "product": "Cert Manager support for Red Hat OpenShift release 1.18",
    "versions": [
      {
        "status": "unaffected",
        "version": "1791966259",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "cert-manager/cert-manager-operator-bundle",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "1780681984",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/model-opt-cuda-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.2",
    "versions": [
      {
        "status": "unaffected",
        "version": "1775740563",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/vllm-cuda-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1778244559",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/model-opt-cuda-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1778244531",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/vllm-rocm-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1778244546",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/vllm-spyre-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1775680192",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/vllm-cuda-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1775680262",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/vllm-rocm-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ai_inference_server:3.3::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat AI Inference Server 3.3",
    "versions": [
      {
        "status": "unaffected",
        "version": "1775749857",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhaiis/model-opt-cuda-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:ceph_storage:8::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Ceph Storage 8",
    "versions": [
      {
        "status": "unaffected",
        "version": "1774002867",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhceph/rhceph-8-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "versions": [
      {
        "status": "unaffected",
        "version": "1775668717",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "discovery/discovery-server-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:discovery:2::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Discovery 2",
    "versions": [
      {
        "status": "unaffected",
        "version": "1775675922",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "discovery/discovery-ui-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:hummingbird:1"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Hardened Images",
    "versions": [
      {
        "status": "unaffected",
        "version": "3.8.12-1.1.hum1",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "gnutls-main",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:insights_proxy:1.5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Insights proxy 1.5",
    "versions": [
      {
        "status": "unaffected",
        "version": "1773685509",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "insights-proxy/insights-proxy-container-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "versions": [
      {
        "status": "unaffected",
        "version": "1773670073",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhui5/cds-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "versions": [
      {
        "status": "unaffected",
        "version": "1773672059",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhui5/haproxy-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "versions": [
      {
        "status": "unaffected",
        "version": "1773668803",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhui5/installer-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:rhui:5::el9"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Update Infrastructure 5",
    "versions": [
      {
        "status": "unaffected",
        "version": "1773670137",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "packageName": "rhui5/rhua-rhel9",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:6"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 6",
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/o:redhat:enterprise_linux:7"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat Enterprise Linux 7",
    "packageName": "gnutls",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift/ose-rhel-coreos-8",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  },
  {
    "cpes": [
      "cpe:/a:redhat:openshift:4"
    ],
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift Container Platform 4",
    "packageName": "openshift/ose-rhel-coreos-9",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-14831

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#23061 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement