5.3
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
Засегнати продукти
- : 0
- Red Hat Red Hat Enterprise Linux 10: от 0:3.8.10-3.el10_1 нататък
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: от 0:3.8.9-9.el10_0.17 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:3.6.16-8.el8_10.5 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:3.6.16-8.el8_10.5 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: от 0:3.6.14-10.el8_4.1 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: от 0:4.13-3.el8_4.1 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: от 0:3.6.14-10.el8_4.1 нататък
- Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: от 0:4.13-3.el8_4.1 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: от 0:3.6.16-5.el8_6.5 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: от 0:4.13-3.el8_6.2 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: от 0:3.6.16-5.el8_6.5 нататък
- Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: от 0:4.13-3.el8_6.2 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: от 0:3.6.16-7.el8_8.4 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: от 0:4.13-4.el8_8.1 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: от 0:3.6.16-7.el8_8.4 нататък
- Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: от 0:4.13-4.el8_8.1 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:3.8.3-10.el9_7 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:3.8.3-10.el9_7 нататък
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: от 0:3.7.6-21.el9_2.5 нататък
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: от 0:3.8.3-4.el9_4.5 нататък
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: от 0:3.8.3-6.el9_6.3 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325677 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325711 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325710 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-3.1777325680 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325709 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325680 нататък
- Red Hat RHEL-8 based Middleware Containers: от 7.13.5-4.1777325708 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459707 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459711 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791459759 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1789029076 нататък
- Red Hat Cert Manager support for Red Hat OpenShift release 1.18: от 1791966259 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1780681984 нататък
- Red Hat Red Hat AI Inference Server 3.2: от 1775740563 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244559 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244531 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1778244546 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1775680192 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1775680262 нататък
- Red Hat Red Hat AI Inference Server 3.3: от 1775749857 нататък
- Red Hat Red Hat Ceph Storage 8: от 1774002867 нататък
- Red Hat Red Hat Discovery 2: от 1775668717 нататък
- Red Hat Red Hat Discovery 2: от 1775675922 нататък
- Red Hat Red Hat Hardened Images: от 3.8.12-1.1.hum1 нататък
- Red Hat Red Hat Insights proxy 1.5: от 1773685509 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1773670073 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1773672059 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1773668803 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1773670137 нататък
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 4
- Siemens SIMATIC CN 4100: преди V5.0
Вид слабост
История
- 9 февруари 2026 Публикувано
Други уязвимости в същия продукт
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2025-14831
- https://nvd.nist.gov/vuln/detail/CVE-2025-14831
- https://access.redhat.com/errata/RHSA-2026:13812
- https://access.redhat.com/errata/RHSA-2026:16008
- https://access.redhat.com/errata/RHSA-2026:16009
- https://access.redhat.com/errata/RHSA-2026:16174
- https://access.redhat.com/errata/RHSA-2026:25096
- https://access.redhat.com/errata/RHSA-2026:30849
- https://access.redhat.com/errata/RHSA-2026:30850
- https://access.redhat.com/errata/RHSA-2026:33125
- https://access.redhat.com/errata/RHSA-2026:3477
- https://access.redhat.com/errata/RHSA-2026:4188
- https://access.redhat.com/errata/RHSA-2026:4655
- https://access.redhat.com/errata/RHSA-2026:4943
- https://access.redhat.com/errata/RHSA-2026:5585
- https://access.redhat.com/errata/RHSA-2026:5606
- https://access.redhat.com/errata/RHSA-2026:6618
- https://access.redhat.com/errata/RHSA-2026:6630
- https://access.redhat.com/errata/RHSA-2026:6737
- https://access.redhat.com/errata/RHSA-2026:6738
- https://access.redhat.com/errata/RHSA-2026:7329
- https://access.redhat.com/errata/RHSA-2026:7335
- https://access.redhat.com/errata/RHSA-2026:7477
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:8746
- https://access.redhat.com/errata/RHSA-2026:8747
- https://access.redhat.com/errata/RHSA-2026:8748
- https://access.redhat.com/security/cve/CVE-2025-14831
- https://bugzilla.redhat.com/show_bug.cgi?id=2423177
- https://gitlab.com/gnutls/gnutls/-/issues/1773
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html