Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5897 State: PUBLISHED Published: 2025-06-09T21:00:17.023Z Last Updated: 2025-06-10T15:29:58.751Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:T/RC:R) Vendors: vuejs Products: vue-cli Problem Types: CWE-1333, CWE-400 Description: A vulnerability was found in vuejs vue-cli up to 5.0.8. It has been rated as problematic. This issue affects the function HtmlPwaPlugin of the file packages/@vue/cli-plugin-pwa/lib/HtmlPwaPlugin.js of the component Markdown Code Handler. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
exity. The attack may be initiated remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311669 - https://vuldb.com/?ctiid.311669 - https://vuldb.com/?submit.585798 - https://github.com/vuejs/vue-cli/pull/7478
CVE ID: CVE-2025-5898 State: PUBLISHED Published: 2025-06-09T21:31:06.185Z Last Updated: 2025-06-10T15:29:18.893Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: GNU Products: PSPP Problem Types: CWE-787, CWE-119 Description: A vulnerability classified as critical has been found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to out-of-bounds write. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311670 - https://vuldb.com/?ctiid.311670 - https://vuldb.com/?submit.586105 - https://savannah.gnu.org/bugs/index.php?67071 - https://drive.google.com/file/d/1ZigqDFZQn5YUWFLu1V2juDGWQgbJFAtX/view?usp=sharing - https://www.gnu.org/
CVE ID: CVE-2025-5899 State: PUBLISHED Published: 2025-06-09T22:00:15.952Z Last Updated: 2025-06-10T15:29:10.200Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: GNU Products: PSPP Problem Types: CWE-590 Description: A vulnerability classified as critical was found in GNU PSPP 82fb509fb2fedd33e7ac0c46ca99e108bb3bdffb. Affected by this vulnerability is the function parse_variables_option of the file utilities/pspp-convert.c. The manipulation leads to free of memory not on the heap. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311671 - https://vuldb.com/?ctiid.311671 - https://vuldb.com/?submit.586106 - https://savannah.gnu.org/bugs/index.php?67072 - https://drive.google.com/file/d/1YPJLiBzOwVTcc2FzdawYxBJWGujwqy7o/view?usp=sharing - https://www.gnu.org/
CVE ID: CVE-2025-5900 State: PUBLISHED Published: 2025-06-09T22:00:19.518Z Last Updated: 2025-06-10T15:29:00.898Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC9 Problem Types: CWE-352, CWE-862 Description: A vulnerability, which was classified as problematic, was found in Tenda AC9 15.03.02.13. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311673 - https://vuldb.com/?ctiid.311673 - https://vuldb.com/?submit.5921
nrichment: References: - https://vuldb.com/?id.311673 - https://vuldb.com/?ctiid.311673 - https://vuldb.com/?submit.592198 - https://vuldb.com/?submit.592199 - https://candle-throne-f75.notion.site/Tenda-AC9-fromSysToolReboot-20adf0aa1185806a9d20ee5c355c08a6?pvs=73 - https://candle-throne-f75.notion.site/Tenda-AC9-fromSysToolRestoreSet-20adf0aa11858094a25ae21f9b4203da - https://www.tenda.com.cn/
CVE ID: CVE-2025-5901 State: PUBLISHED Published: 2025-06-09T22:31:07.562Z Last Updated: 2025-06-10T15:28:26.501Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311674 - https://vuldb.com/?ctiid.311674 - https://vuldb.com/?submit.592243 - https://candle-throne-f75.notion.site/TOTOLINK-T10-UploadCustomModule-20bdf0aa118580d59961cd545582c118 - https://www.totolink.net/
CVE ID: CVE-2025-5902 State: PUBLISHED Published: 2025-06-09T23:00:16.214Z Last Updated: 2025-06-10T15:28:10.185Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311675 - https://vuldb.com/?ctiid.311675 - https://vuldb.com/?submit.592246 - https://candle-throne-f75.notion.site/TOTOLINK-T10-setUpgradeFW-20bdf0aa11858089bc28f634bb140d00 - https://www.totolink.net/
CVE ID: CVE-2025-5903 State: PUBLISHED Published: 2025-06-09T23:31:07.307Z Last Updated: 2025-06-10T15:28:00.122Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311676 - https://vuldb.com/?ctiid.311676 - https://vuldb.com/?submit.592247 - https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiAclRules-20bdf0aa118580399a8df6ba2a44c197 - https://www.totolink.net/
CVE ID: CVE-2025-5904 State: PUBLISHED Published: 2025-06-10T00:00:16.259Z Last Updated: 2025-06-10T15:27:34.860Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument device_name leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311677 - https://vuldb.com/?ctiid.311677 - https://vuldb.com/?submit.592264 - https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiMeshName-20bdf0aa1185806eb922dbd496c4a4b4 - https://www.totolink.net/
CVE ID: CVE-2025-5905 State: PUBLISHED Published: 2025-06-10T00:00:18.830Z Last Updated: 2025-06-10T15:27:25.647Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: T10 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311678 - https://vuldb.com/?ctiid.311678 - https://vuldb.com/?submit.592265 - https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiRepeaterCfg-20bdf0aa118580bd8cd0da62d4d2e47f?pvs=73 - https://www.totolink.net/
CVE ID: CVE-2025-5906 State: PUBLISHED Published: 2025-06-10T00:31:05.610Z Last Updated: 2025-06-10T15:19:43.994Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Laundry System Problem Types: CWE-306, CWE-287 Description: A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311679 - https://vuldb.com/?ctiid.31
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311679 - https://vuldb.com/?ctiid.311679 - https://vuldb.com/?submit.592266 - https://github.com/tuooo/CVE/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-5907 State: PUBLISHED Published: 2025-06-10T00:31:08.647Z Last Updated: 2025-06-10T15:24:49.991Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311680 - https://vuldb.com/?ctiid.311680 - https://vuldb.com/?submit.592267 - https://github.com/byxs0x0/cve2/blob/main/3.md - https://www.totolink.net/
CVE ID: CVE-2025-5908 State: PUBLISHED Published: 2025-06-10T01:00:24.382Z Last Updated: 2025-06-10T15:24:18.576Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This issue affects some unknown processing of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311681 - https://vuldb.com/?ctiid.311681 - https://vuldb.com/?submit.592269 - https://github.com/byxs0x0/cve2/blob/main/4.md - https://www.totolink.net/
CVE ID: CVE-2025-5909 State: PUBLISHED Published: 2025-06-10T01:31:07.748Z Last Updated: 2025-06-10T15:23:39.310Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311682 - https://vuldb.com/?ctiid.311682 - https://vuldb.com/?submit.592270 - https://github.com/byxs0x0/cve2/blob/main/5.md - https://www.totolink.net/
CVE ID: CVE-2025-5910 State: PUBLISHED Published: 2025-06-10T02:00:13.598Z Last Updated: 2025-06-10T15:17:13.512Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311683 - https://vuldb.com/?ctiid.311683 - https://vuldb.com/?submit.592271 - https://github.com/byxs0x0/cve2/blob/main/6.md - https://www.totolink.net/
CVE ID: CVE-2025-5911 State: PUBLISHED Published: 2025-06-10T02:31:06.182Z Last Updated: 2025-06-10T13:15:50.789Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311684 - https://vuldb.com/?ctiid.311684 - https://vuldb.com/?submit.592272 - https://github.com/byxs0x0/cve2/blob/main/7.md - https://www.totolink.net/
CVE ID: CVE-2025-5912 State: PUBLISHED Published: 2025-06-10T03:00:17.489Z Last Updated: 2025-06-10T13:13:54.741Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-632 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-632 FW103B08. It has been declared as critical. This vulnerability affects the function do_file of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Anal
nd may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311686 - https://vuldb.com/?ctiid.311686 - https://vuldb.com/?submit.592307 - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir632-dlink#poc - https://www.dlink.com/
CVE ID: CVE-2025-5913 State: PUBLISHED Published: 2025-06-10T03:31:06.816Z Last Updated: 2025-06-10T13:12:25.672Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Vehicle Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Vehicle Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/search-vehicle.php. The manipulation of the argument searchinputdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311687 - https://vuldb.com/?ctiid.311687 - https://vuldb.com/?submit.592310 - https://github.com/kakalalaww/CVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-5914 State: PUBLISHED Published: 2025-06-09T19:53:48.923Z Last Updated: 2025-11-22T03:00:38.613Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services
e Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat
Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat OpenShift Container Platform 4.20, Red Hat Web Terminal 1.11 on RHEL 9, Red Hat Web Terminal 1.12 on RHEL 9, cert-manager operator for Red Hat OpenShift 1.16, Compliance Operator 1, File Integrity Operator 1, Red Hat Discovery 2, Red Hat Insights proxy 1.5, Red Hat OpenShift distributed tracing 3.5.2, Red Hat OpenShift sandboxed containers 1.1, Red Hat Enterprise Linux 6 Problem Types: CWE-415 Description: A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free
e_read_format_rar_seek_data() function. This flaw involves an integer overflow that can ultimately lead to a double-free condition. Exploiting a double-free vulnerability can result in memory corruption, enabling an attacker to execute arbitrary code or cause a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:14130 - https://access.redhat.com/errata/RHSA-2025:14135 - https://access.redhat.com/errata/RHSA-2025:14137 - https://access.redhat.com/errata/RHSA-2025:14141 - https://access.redhat.com/errata/RHSA-2025:14142 - https://access.redhat.com/errata/RHSA-2025:14525 - https://access.redhat.com/errata/RHSA-
t.com/errata/RHSA-2025:14142 - https://access.redhat.com/errata/RHSA-2025:14525 - https://access.redhat.com/errata/RHSA-2025:14528 - https://access.redhat.com/errata/RHSA-2025:14594 - https://access.redhat.com/errata/RHSA-2025:14644 - https://access.redhat.com/errata/RHSA-2025:14808 - https://access.redhat.com/errata/RHSA-2025:14810 - https://access.redhat.com/errata/RHSA-2025:14828 - https://access.redhat.com/errata/RHSA-2025:15024 - https://access.redhat.com/errata/RHSA-2025:15397 - https://access.redhat.com/errata/RHSA-2025:15709 - https://access.redhat.com/errata/RHSA-2025:15827 - https://access.redhat.com/errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:16524 - https:
025:15827 - https://access.redhat.com/errata/RHSA-2025:15828 - https://access.redhat.com/errata/RHSA-2025:16524 - https://access.redhat.com/errata/RHSA-2025:18217 - https://access.redhat.com/errata/RHSA-2025:18218 - https://access.redhat.com/errata/RHSA-2025:18219 - https://access.redhat.com/errata/RHSA-2025:19041 - https://access.redhat.com/errata/RHSA-2025:19046 - https://access.redhat.com/errata/RHSA-2025:21885 - https://access.redhat.com/errata/RHSA-2025:21913 - https://access.redhat.com/security/cve/CVE-2025-5914 - https://bugzilla.redhat.com/show_bug.cgi?id=2370861 - https://github.com/libarchive/libarchive/pull/2598 - https://github.com/libarchive/libarchive/releases/tag/v3.8.0
CVE ID: CVE-2025-5915 State: PUBLISHED Published: 2025-06-09T19:49:02.143Z Last Updated: 2025-11-21T07:32:37.479Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-122 Description: A vulnerability has been identified in the libarchive library. This flaw can lead to a heap buffer over-read due to the size of a filter block potentially exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocate
y exceeding the Lempel-Ziv-Storer-Schieber (LZSS) window. This means the library may attempt to read beyond the allocated memory buffer, which can result in unpredictable program behavior, crashes (denial of service), or the disclosure of sensitive information from adjacent memory regions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5915 - https://bugzilla.redhat.com/show_bug.cgi?id=2370865 - https://github.com/libarchive/libarchive/pull/2599 - https://github.com/libarchive/libarchive/releases/tag/v3.8.0
CVE ID: CVE-2025-5916 State: PUBLISHED Published: 2025-06-09T19:49:07.620Z Last Updated: 2025-11-21T07:32:41.901Z Severity: LOW (CVSS 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 Problem Types: CWE-190 Description: A vulnerability has been identified in the libarchive library. This flaw involves an integer overflow that can be triggered when processing a Web Archive (WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive
(WARC) file that claims to have more than INT64_MAX - 4 content bytes. An attacker could craft a malicious WARC archive to induce this overflow, potentially leading to unpredictable program behavior, memory corruption, or a denial-of-service condition within applications that process such archives using libarchive. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5916 - https://bugzilla.redhat.com/show_bug.cgi?id=2370872 - https://github.com/libarchive/libarchive/pull/2568 - https://github.com/libarchive/libarchive/releases/tag/v3.8.0