CVE-2025-6395

Name	CVE-2025-6395
Description	A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite(). When it reads certain settings from a template file, it can allow an attacker to cause an out-of-bounds (OOB) NULL pointer write, resulting in memory corruption and a denial of service (DoS) that could crash the system.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
gnutls28 (PTS)	bullseye	3.7.1-5+deb11u5	vulnerable
	bullseye (security)	3.7.1-5+deb11u7	vulnerable
	bookworm, bookworm (security)	3.7.9-2+deb12u4	vulnerable
	trixie	3.8.9-2	vulnerable
	sid	3.8.9-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
gnutls28	source	(unstable)	3.8.9-3

Notes

https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html
Fixed by: https://gitlab.com/gnutls/gnutls/-/commit/23135619773e6ec087ff2abc65405bd4d5676bad (3.8.10)