The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16116 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)


    Bug Fix(es) and Enhancement(s):

      * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:17415 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16116 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:17415 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)


    Bug Fix(es) and Enhancement(s):

      * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system.(CVE-2025-32990)

    A NULL pointer dereference flaw was found in the GnuTLS software in
    _gnutls_figure_common_ciphersuite().(CVE-2025-6395)

Tenable has extracted the preceding description block directly from the EulerOS gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

A NULL pointer dereference flaw was found in the GnuTLS software in
_gnutls_figure_common_ciphersuite().

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
266059	AlmaLinux 9 : gnutls (ALSA-2025:16116)	Nessus	Alma Linux Local Security Checks	2025/9/29	2025/9/29	high
269762	RockyLinux 8 : gnutls (RLSA-2025:17415)	Nessus	Rocky Linux Local Security Checks	2025/10/8	2025/10/8	high
269925	RockyLinux 9 : gnutls (RLSA-2025:16116)	Nessus	Rocky Linux Local Security Checks	2025/10/10	2025/10/10	high
270285	AlmaLinux 8 : gnutls (ALSA-2025:17415)	Nessus	Alma Linux Local Security Checks	2025/10/14	2025/10/14	high
271299	EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2025-2259)	Nessus	Huawei Local Security Checks	2025/10/24	2025/10/24	high
503954	Siemens SIMATIC S7-1500 NULL Pointer Dereference (CVE-2025-6395)	Tenable OT Security	Tenable.ot	2025/11/13	2025/11/13	medium

偵測

搜尋 Plugin

high

high

high

high

high

medium