A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2) that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS verifies certificates from certain websites when the certificate (SCT) is not checked correctly.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16115 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16116 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16115 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)


    Bug Fix(es) and Enhancement(s):

      * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17361 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS (CVE-2024-12243)

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:17348 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:16116 advisory.

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)


    Bug Fix(es) and Enhancement(s):

      * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)
      * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)
      * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)
      * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-16116 advisory.

    [3.8.3-6.2]
    - key_update: rework the rekeying logic (RHEL-107498)

    [3.8.3-6.1]
    - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-20606 advisory.

    [3.8.3-6.2_fips]
    - Add FIPS package change: add fips suffix to Release and       set Epoch to 10 [Orabug: 35925409]
    - Update FIPS module name for Oracle Linux [Orabug: 35925409]

    [3.8.3-6.2]
    - key_update: rework the rekeying logic (RHEL-107498)

    [3.8.3-6.1]
    - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-16115 advisory.

    [3.8.9-9.14]
    - key_update: rework the rekeying logic (RHEL-107498)
    - Fix CVE-2025-6395, CVE-2025-32988, CVE-2025-32989, CVE-2025-32990

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202509-08 (GnuTLS: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in GnuTLS. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16116 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16115 advisory.

    The gnutls packages provide the GNU Transport Layer Security (GnuTLS) library, which implements     cryptographic algorithms and protocols such as SSL, TLS, and DTLS.

    Security Fix(es):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (CVE-2025-32990)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (CVE-2025-32989)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (CVE-2025-32988)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (CVE-2025-6395)

    Bug Fix(es) and Enhancement(s):

    * gnutls: Vulnerability in GnuTLS certtool template parsing (BZ#2359620)

    * gnutls: Vulnerability in GnuTLS SCT extension parsing (BZ#2359621)

    * gnutls: Vulnerability in GnuTLS otherName SAN export (BZ#2359622)

    * gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() (BZ#2376755)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the gnutls package has been released.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1140 advisory.

    A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to incorrect ownership     handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName. If the     type-id OID is invalid or malformed, GnuTLS will call asn1_delete_structure() on an ASN.1 node it does not     own, leading to a double-free condition when the parent function or caller later attempts to free the same     structure.

    This vulnerability can be triggered using only public GnuTLS APIs and may result in denial of service or     memory corruption, depending on allocator behavior. (CVE-2025-32988)

    A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency     (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a     malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2)     that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS     verifies certificates from certain websites when the certificate (SCT) is not checked correctly.
    (CVE-2025-32989)

    A heap-buffer-overflow (off-by-one) flaw was found in the GnuTLS software in the template parsing logic     within the certtool utility. When it reads certain settings from a template file, it allows an attacker to     cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial-of-service     (DoS) that could potentially crash the system. (CVE-2025-32990)

    A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
    When it reads certain settings from a template file, it can allow an attacker to cause an out-of-bounds     (OOB) NULL pointer write, resulting in memory corruption and a denial of service (DoS) that could crash     the system. (CVE-2025-6395)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02589-1 advisory.

    - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
    - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries     containing an otherName (bsc#1246232)
    - CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate     parsing (bsc#1246233)
    - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02595-1 advisory.

    - CVE-2025-6395: Fix NULL pointer dereference when 2nd Client Hello omits PSK (bsc#1246299)
    - CVE-2025-32988: Fix double-free due to incorrect ownership handling in the export logic of SAN entries     containing an otherName (bsc#1246232)
    - CVE-2025-32989: Fix heap buffer overread when handling the CT SCT extension during X.509 certificate     parsing (bsc#1246233)
    - CVE-2025-32990: Fix 1-byte heap buffer overflow when parsing templates with certtool (bsc#1246267)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory.

  - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency     (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a     malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2)     that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS     verifies certificates from certain websites when the certificate (SCT) is not checked correctly.
    (CVE-2025-32989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of gnutls installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32989 advisory.

  - A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the Certificate Transparency     (CT) Signed Certificate Timestamp (SCT) extension during X.509 certificate parsing. This flaw allows a     malicious user to create a certificate containing a malformed SCT extension (OID 1.3.6.1.4.1.11129.2.4.2)     that contains sensitive data. This issue leads to the exposure of confidential information when GnuTLS     verifies certificates from certain websites when the certificate (SCT) is not checked correctly.
    (CVE-2025-32989)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7635-1 advisory.

    It was discovered that GnuTLS incorrectly handled exporting Subject Alternative Name (SAN) entries     containing an otherName. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a     denial of service, or possibly execute arbitrary code. (CVE-2025-32988)

    It was discovered that GnuTLS incorrectly handled parsing the Certificate Transparency (CT) Signed     Certificate Timestamp (SCT) extension. A remote attacker could use this issue to cause GnuTLS to crash,     resulting in a denial of service, or possibly obtain sensitive information. (CVE-2025-32989)

    It was discovered that the GnuTLS certtool utility incorrectly handled parsing certain template files. An     attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2025-32990)

    Stefan Bhler discovered that GnuTLS incorrectly handled parsing certain template files. An attacker     could possibly use this issue to cause GnuTLS to crash, resulting in a denial of service. (CVE-2025-6395)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5962 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5962-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     July 16, 2025                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : gnutls28     CVE ID         : CVE-2025-6395 CVE-2025-32988 CVE-2025-32989 CVE-2025-32990

    Multiple security issues were discovered in GNU TLS, which could result in     denial of service.

    For the stable distribution (bookworm), these problems have been fixed in     version 3.7.9-2+deb12u5.

    We recommend that you upgrade your gnutls28 packages.

    For the detailed security status of gnutls28 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gnutls28

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c3e1df74-5e73-11f0-95e5-74563cf9e4e9 advisory.

    Daiki Ueno  reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-16a24364ce advisory.

    This updates gnutls to the latest upstream release. Notable changes are:

    * PKCS#11 cryptographic provider support
    * Support for kTLS rekeying with kernel 6.14+
    * Support for the almost standardized ML-DSA private key formats

    This also fixes 4 CVEs (CVE-2025-32989, CVE-2025-6395, CVE-2025-32988, and CVE-2025-32990).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
269937	RockyLinux 10 : gnutls (RLSA-2025:16115)	Nessus	Rocky Linux Local Security Checks	high
269925	RockyLinux 9 : gnutls (RLSA-2025:16116)	Nessus	Rocky Linux Local Security Checks	high
269817	AlmaLinux 10 : gnutls (ALSA-2025:16115)	Nessus	Alma Linux Local Security Checks	high
266624	RHEL 9 : gnutls (RHSA-2025:17361)	Nessus	Red Hat Local Security Checks	high
266618	RHEL 9 : gnutls (RHSA-2025:17348)	Nessus	Red Hat Local Security Checks	high
266059	AlmaLinux 9 : gnutls (ALSA-2025:16116)	Nessus	Alma Linux Local Security Checks	high
265701	Oracle Linux 9 : gnutls (ELSA-2025-16116)	Nessus	Oracle Linux Local Security Checks	high
265700	Oracle Linux 9 : gnutls (ELSA-2025-20606)	Nessus	Oracle Linux Local Security Checks	high
265699	Oracle Linux 10 : gnutls (ELSA-2025-16115)	Nessus	Oracle Linux Local Security Checks	high
265361	GLSA-202509-08 : GnuTLS: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
265352	RHEL 9 : gnutls (RHSA-2025:16116)	Nessus	Red Hat Local Security Checks	high
265339	RHEL 10 : gnutls (RHSA-2025:16115)	Nessus	Red Hat Local Security Checks	high
252966	Photon OS 4.0: Gnutls PHSA-2025-4.0-0854	Nessus	PhotonOS Local Security Checks	high
251381	Amazon Linux 2023 : gnutls, gnutls-c++, gnutls-dane (ALAS2023-2025-1140)	Nessus	Amazon Linux Local Security Checks	high
243300	SUSE SLES15 Security Update : gnutls (SUSE-SU-2025:02589-1)	Nessus	SuSE Local Security Checks	medium
243296	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gnutls (SUSE-SU-2025:02595-1)	Nessus	SuSE Local Security Checks	medium
242860	Azure Linux 3.0 Security Update: gnutls (CVE-2025-32989)	Nessus	Azure Linux Local Security Checks	medium
242852	CBL Mariner 2.0 Security Update: gnutls (CVE-2025-32989)	Nessus	MarinerOS Local Security Checks	medium
242667	Photon OS 5.0: Gnutls PHSA-2025-5.0-0561	Nessus	PhotonOS Local Security Checks	medium
242198	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : GnuTLS vulnerabilities (USN-7635-1)	Nessus	Ubuntu Local Security Checks	medium
242186	Debian dsa-5962 : gnutls-bin - security update	Nessus	Debian Local Security Checks	medium
242080	FreeBSD : GnuTLS -- multiple vulnerabilities (c3e1df74-5e73-11f0-95e5-74563cf9e4e9)	Nessus	FreeBSD Local Security Checks	medium
242043	Fedora 42 : gnutls (2025-16a24364ce)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2025-32989

medium

Tenable Plugins

high

high

high

high

high

high

high

high

high

high

high

high

high

high

medium

medium

medium

medium

medium

medium

medium

medium

medium