CVE Vulnerabilities

CVE-2025-6395

NULL Pointer Dereference

Published: Jul 10, 2025 | Modified: Jul 15, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
6.5 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Ubuntu
MEDIUM

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Gnutls28 Ubuntu devel *
Gnutls28 Ubuntu jammy *
Gnutls28 Ubuntu noble *
Gnutls28 Ubuntu oracular *
Gnutls28 Ubuntu plucky *
Gnutls28 Ubuntu upstream *

Potential Mitigations

References