Home > Vulnerability Database > CVE-2025-6395

Mend.io Vulnerability Database

CVE-2025-6395

Good to know:

Date: July 10, 2025

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). When it reads certain settings from a template file, it can allow an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial of service (DoS) that could crash the system.

Severity Score

6.5

Related Resources (10)

Url: https://access.redhat.com/errata/RHSA-2025:16115

Url: https://access.redhat.com/errata/RHSA-2025:17415

Url: https://access.redhat.com/errata/RHSA-2025:16116

Url: https://access.redhat.com/errata/RHSA-2025:17348

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-6395

Url: https://access.redhat.com/security/cve/CVE-2025-6395

Url: https://access.redhat.com/errata/RHSA-2025:17361

Url: https://access.redhat.com/errata/RHSA-2025:19088

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2376755

Url: https://www.mend.io/vulnerability-database/CVE-2025-6395

Severity Score

6.5

Weakness Type (CWE)

NULL Pointer Dereference

CWE-476

Top Fix

Upgrade Version

Upgrade to version https://gitlab.com/gnutls/gnutls.git - 3.8.10

Learn More

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2025-6395

Good to know:

Date: July 10, 2025

Severity Score

Related Resources (10)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

Do you need more information?