CVE-2025-14831: gnutls Inefficient Algorithmic Complexity

CVSS: 5.3v3.1MediumDeferred

AliasesALPINE-CVE-2025-14831MGASA-2026-0045SUSE-SU-2026:0829-1+10 more

Published 09-02-2026Last modified 14-10-2026

Vulnerability summary

CVE-2025-14831 is a medium (CVSS 5.3) Inefficient Algorithmic Complexity vulnerability in gnutls. EPSS estimates a 0.67% chance of exploitation in the next 30 days, higher than 50.9% of scored vulnerabilities.

Overall risk

21/100

0100

Low · default modelHow is this calculated?

CVSS score

5.3/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.67%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 16 · Related 8

DLA-4492-1 OPENSUSE-SU-2026:10177-1 OPENSUSE-SU-2026:20446-1 RHSA-2026:30849 RHSA-2026:30850 RHSA-2026:33125+10 more

Timeline

09-02-2026
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

CVSS metrics

6 scores · 6 sources · 1 version

v3.15.3

EPSS trend

Probability

0.67%

Chance of exploitation in the next 30 days

Percentile

51%

Versus all other CVEs

30-day change

0.00 pp

From 0.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-407Inefficient Algorithmic ComplexityAn algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

Affected systems

Redhat11 products

gnutls< 0:3.8.9-9.el10_0.17 | < 0:3.8.3-6.el9_6.3 | < 0:3.7.6-21.el9_2.5 | < 0:3.8.3-4.el9_4.5
gnutls-c++< 0:3.8.9-9.el10_0.17 | < 0:3.8.3-6.el9_6.3 | < 0:3.7.6-21.el9_2.5 | < 0:3.8.3-4.el9_4.5
gnutls-c++-debuginfo< 0:3.8.9-9.el10_0.17 | < 0:3.7.6-21.el9_2.5 | < 0:3.8.3-4.el9_4.5
gnutls-dane< 0:3.8.9-9.el10_0.17 | < 0:3.8.3-6.el9_6.3 | < 0:3.7.6-21.el9_2.5 | < 0:3.8.3-4.el9_4.5
gnutls-dane-debuginfo< 0:3.8.9-9.el10_0.17 | < 0:3.8.3-6.el9_6.3 | < 0:3.7.6-21.el9_2.5 | < 0:3.8.3-4.el9_4.5

Show all 11

Suse5 products

gnutls&distro=SUSE Linux Enterprise Micro 5.4< 3.7.3-150400.4.56.1
gnutls&distro=SUSE Linux Enterprise Micro 5.5< 3.7.3-150400.4.56.1
gnutls&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 3.8.3-150600.4.17.1
gnutls&distro=SUSE Linux Micro 6.0< 3.8.3-6.1
gnutls&distro=SUSE Linux Micro 6.1< 3.8.3-slfo.1.1_6.1

Alpine1 product

gnutls< 3.8.12-r0

Debian1 product

gnutls28< 3.7.9-2+deb12u6 | < 3.8.9-3+deb13u2 | < 3.8.12-1

Mageia1 product

gnutls< 3.8.4-1.4.mga9

Opensuse1 product

gnutls&distro=openSUSE Leap 15.6< 3.8.3-150600.4.17.1

Ubuntu1 product

gnutls28< 3.5.18-1ubuntu1.6+esm3 | < 3.6.13-2ubuntu1.12+esm2 | < 3.7.3-4ubuntu1.8 | All versions (No fix recorded) | < 3.7.3-4ubuntu1.8+Fips1.1 | < 3.8.3-1.1ubuntu3.5 | < 3.8.3-1.1ubuntu3.5+Fips1.1 | < 3.8.9-3ubuntu2.1

7 vendors · 21 products