CVE-2025-14831: Red Hat Ai Inference Server 3.2

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).

Affected products

Red Hat Red Hat Ai Inference Server 3.2: before 1780681984 (fixed in 1780681984); before 1775740563 (fixed in 1775740563)
Red Hat Red Hat Ai Inference Server 3.3: before 1778244559 (fixed in 1778244559); before 1778244531 (fixed in 1778244531); before 1778244546 (fixed in 1778244546); before 1775680192 (fixed in 1775680192); before 1775680262 (fixed in 1775680262); before 1775749857 (fixed in 1775749857)
Red Hat Red Hat Ceph Storage 8: before 1774002867 (fixed in 1774002867)
Red Hat Red Hat Discovery 2: before 1775668717 (fixed in 1775668717); before 1775675922 (fixed in 1775675922)
Red Hat Red Hat Enterprise Linux 10: before 0:3.8.10-3.el10_1 (fixed in 0:3.8.10-3.el10_1)
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: before 0:3.8.9-9.el10_0.17 (fixed in 0:3.8.9-9.el10_0.17)
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8: before 0:3.6.16-8.el8_10.5 (fixed in 0:3.6.16-8.el8_10.5)
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 0:3.6.14-10.el8_4.1 (fixed in 0:3.6.14-10.el8_4.1); before 0:4.13-3.el8_4.1 (fixed in 0:4.13-3.el8_4.1)
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: before 0:3.6.14-10.el8_4.1 (fixed in 0:3.6.14-10.el8_4.1); before 0:4.13-3.el8_4.1 (fixed in 0:4.13-3.el8_4.1)
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 0:3.6.16-5.el8_6.5 (fixed in 0:3.6.16-5.el8_6.5); before 0:4.13-3.el8_6.2 (fixed in 0:4.13-3.el8_6.2)
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: before 0:3.6.16-5.el8_6.5 (fixed in 0:3.6.16-5.el8_6.5); before 0:4.13-3.el8_6.2 (fixed in 0:4.13-3.el8_6.2)
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: before 0:3.6.16-7.el8_8.4 (fixed in 0:3.6.16-7.el8_8.4); before 0:4.13-4.el8_8.1 (fixed in 0:4.13-4.el8_8.1)
Red Hat Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions: before 0:3.6.16-7.el8_8.4 (fixed in 0:3.6.16-7.el8_8.4); before 0:4.13-4.el8_8.1 (fixed in 0:4.13-4.el8_8.1)
Red Hat Red Hat Enterprise Linux 9: before 0:3.8.3-10.el9_7 (fixed in 0:3.8.3-10.el9_7)
Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:3.7.6-21.el9_2.5 (fixed in 0:3.7.6-21.el9_2.5)
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: before 0:3.8.3-4.el9_4.5 (fixed in 0:3.8.3-4.el9_4.5)
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: before 0:3.8.3-6.el9_6.3 (fixed in 0:3.8.3-6.el9_6.3)
Red Hat Red Hat Hardened Images: before 3.8.12-1.1.hum1 (fixed in 3.8.12-1.1.hum1)
Red Hat Red Hat Insights Proxy 1.5: before 1773685509 (fixed in 1773685509)
Red Hat Red Hat Openshift Container Platform 4
Red Hat Red Hat Update Infrastructure 5: before 1773670073 (fixed in 1773670073); before 1773672059 (fixed in 1773672059); before 1773668803 (fixed in 1773668803); before 1773670137 (fixed in 1773670137)
Red Hat Rhel-8 Based Middleware Containers: before 7.13.5-4.1777325677 (fixed in 7.13.5-4.1777325677); before 7.13.5-4.1777325711 (fixed in 7.13.5-4.1777325711); before 7.13.5-4.1777325710 (fixed in 7.13.5-4.1777325710); before 7.13.5-3.1777325680 (fixed in 7.13.5-3.1777325680); before 7.13.5-4.1777325709 (fixed in 7.13.5-4.1777325709); before 7.13.5-4.1777325680 (fixed in 7.13.5-4.1777325680); …
Siemens SIMATIC Cn 4100: before V5.0 (fixed in V5.0)

Published 2026-02-09. Last modified 2026-09-01.