CVE-2025-6395

Published: Jul 10, 2025Modified: Jun 30, 2026Deferred

6.5

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H

Exploitability: 2.2 / Impact: 4.2

Source: secalert@redhat.com (Secondary)

Description

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

Related CWEs

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (15)

https://access.redhat.com/errata/RHSA-2025:16115

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:16116

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:17181

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:17348

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:17361

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:17415

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:19088

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2025:22529

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2025-6395

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2376755

Source: secalert@redhat.com

https://gitlab.com/gnutls/gnutls/-/issues/1718

Source: secalert@redhat.com

https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2025/07/11/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.