gnutls (SUSE:Linux Micro 6.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Micro 6.0 package gnutls, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2025-32988 — CVSS 6.5 (medium): A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership handling in the export logic of Subject…
• CVE-2025-6395 — CVSS 6.5 (medium): A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
• CVE-2025-32990 — CVSS 6.5 (medium): A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When…
• CVE-2025-32989 — CVSS 5.3 (medium): A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp…
• CVE-2024-12243 — CVSS 5.3 (medium): A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding…
• CVE-2024-28834 — CVSS 5.3 (medium): A flaw was found in GnuTLS. The Minerva attack is a cryptographic vulnerability that exploits deterministic behavior in systems like…
• CVE-2025-14831 — CVSS 5.3 (medium): A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory…
• CVE-2024-28835 — CVSS 5.0 (medium): A flaw has been discovered in GnuTLS where an application crash can be induced when attempting to verify a specially crafted .pem bundle…
• CVE-2025-9820 — CVSS 4.0 (medium): A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization…