CVE-2025-14831
Medium · 5.3CVSS
5.3
EPSS
0.7%
Published
Feb 9, 2026
CISA due date
—
The record
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Mageia:9 | gnutls | 0 | 3.8.4-1.4.mga9 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | gnutls | 0 | 3.8.3-150600.4.17.1 |
| openSUSE:Leap 15.6 | gnutls | 0 | 3.8.3-150600.4.17.1 |
| openSUSE:Leap 16.0 | gnutls | 0 | 3.8.10-160000.2.1 |
| openSUSE:Tumbleweed | gnutls | 0 | 3.8.12-1.1 |
Related vulnerabilities
- CVE-2025-9820 A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init()… Also affects gnutls
- CVE-2024-28834 A flaw was found in GnuTLS. Also affects gnutls
- CVE-2024-28835 A flaw has been discovered in GnuTLS where an application crash can be induced when… Also affects gnutls
- CVE-2024-0553 A vulnerability was found in GnuTLS. Also affects gnutls
- CVE-2023-5981 A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK… Also affects gnutls
- CVE-2026-42014 A flaw was found in GnuTLS. Also affects gnutls
- CVE-2026-5419 A flaw was found in gnutls. Also affects gnutls
- CVE-2026-5260 A flaw was found in libgnutls. Also affects gnutls