EulerOS Virtualization 2.13.0 : gnutls (EulerOS-SA-2026-2168)

medium Nessus Plugin ID 319395

Synopsis

The remote EulerOS Virtualization host is missing multiple security updates.

Description

According to the versions of the gnutls packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).(CVE-2025-14831)

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization. When a token label longer than expected is processed, the function writes past the end of a fixed-size stack buffer. This programming error can cause the application using GnuTLS to crash or, in certain conditions, be exploited for code execution. As a result, systems or applications relying on GnuTLS may be vulnerable to a denial of service or local privilege escalation attacks.(CVE-2025-9820)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization gnutls security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected gnutls packages.

Plugin Details

Severity: Medium

ID: 319395

File Name: EulerOS_SA-2026-2168.nasl

Version: 1.1

Type: Local

Family: Huawei Local Security Checks

Published: 6/6/2026

Updated: 6/6/2026

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.9

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS Score Source: CVE-2025-14831

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Temporal Score: 4.6

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:huawei:euleros:gnutls, p-cpe:/a:huawei:euleros:gnutls-utils, cpe:/o:huawei:euleros:uvp:2.13.0

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/EulerOS/release, Host/EulerOS/rpm-list, Host/EulerOS/uvp_version

Exploit Ease: No known exploits are available

Patch Publication Date: 6/2/2026

Vulnerability Publication Date: 11/21/2025

Reference Information

CVE: CVE-2025-14831, CVE-2025-9820

Detections

Analytics