Medium severity · published Jul 10, 2025
CVE-2025-32989
Gnutls: vulnerability in gnutls sct extension parsing
5.3
CVSS
1.5%
EPSS
No
On KEV
Description
A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS verifies certificates from certain websites when the certificate (SCT) is not checked correctly.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Ceph Storage 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Discovery 2 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 10 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 6 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 7 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 9.4 Extended Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Hardened Images · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Insights proxy 1.5 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Container Platform 4 · Red Hat
All versions, or not specified · source: vendor
EL
Enterprise Linux · Redhat
6.0; 7.0; 8.0; 9.0; 10.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-32989
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-32989
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:16115
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:16116
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:17181
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:17348
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:17361
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:19088
More from Red Hat Ceph Storage 7
9.8
CVE-2026-27459
pyOpenSSL DTLS cookie callback buffer overflow
9.8
CVE-2025-56005
An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function
8.2
CVE-2025-32988
Gnutls: vulnerability in gnutls othername san export
7.5
CVE-2026-42154
Prometheus: remote read endpoint allows denial of service via crafted snappy payload
7.5
CVE-2026-42151
Prometheus Azure AD remote write OAuth client secret exposed via config API