Attestkeep
Sprache: Deutsch
Loslegen

Schwachstellen / CVE-2025-68114

kritisch

CVE-2025-68114

capstone: Capstone: Memory corruption via unchecked vsnprintf return

Veröffentlicht Geändert CWE 120, 124
In der Trivy Database seit spätestens 24. Okt. 2026, 07:11 UTCWann der Eintrag vor diesem Build hinzukam, ist nicht erfasst.

Einstufung nach Quelle

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut AlmaLinux (hoch), Oracle (hoch), Rocky Linux (hoch), Red Hat (mittel), Amazon (mittel), Azure Linux (mittel).

Beschreibung

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

Betroffene Pakete und behobene Versionen

QuellePaketBehoben in
Photon OS 4.0capstone, capstone-devel4.0.2-2.ph4
Photon OS 5.0capstone, capstone-devel4.0.2-3.ph5
alma 10capstone-java, python3-capstone5.0.1-7.el10_1
alma 9capstone, capstone-devel, capstone-java und 1 weitere4.0.2-11.el9_7
alpine 3.23capstone5.0.7-r0
alpine 3.24capstone5.0.7-r0
alpine edgecapstone5.0.7-r0
amazon linux 2capstone, capstone-debuginfo, capstone-devel und 2 weitere3.0.5-1.amzn2.0.2
amazon linux 2023capstone, capstone-debuginfo, capstone-debugsource und 4 weitere4.0.2-9.amzn2023.0.5
Azure Linux 3.0rust0:1.90.0-4.azl3
debian 11capstonekein Fix angegeben
debian 12capstonekein Fix angegeben
Alle 63 Einträge aus 30 Quellen zeigen
QuellePaketBehoben in
Photon OS 4.0capstone4.0.2-2.ph4
Photon OS 4.0capstone-devel4.0.2-2.ph4
Photon OS 5.0capstone4.0.2-3.ph5
Photon OS 5.0capstone-devel4.0.2-3.ph5
alma 10capstone-java5.0.1-7.el10_1
alma 10python3-capstone5.0.1-7.el10_1
alma 9capstone4.0.2-11.el9_7
alma 9capstone-devel4.0.2-11.el9_7
alma 9capstone-java4.0.2-11.el9_7
alma 9python3-capstone4.0.2-11.el9_7
alpine 3.23capstone5.0.7-r0
alpine 3.24capstone5.0.7-r0
alpine edgecapstone5.0.7-r0
amazon linux 2capstone3.0.5-1.amzn2.0.2
amazon linux 2capstone-debuginfo3.0.5-1.amzn2.0.2
amazon linux 2capstone-devel3.0.5-1.amzn2.0.2
amazon linux 2capstone-java3.0.5-1.amzn2.0.2
amazon linux 2python2-capstone3.0.5-1.amzn2.0.2
amazon linux 2023capstone4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-debuginfo4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-debugsource4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-devel4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-java4.0.2-9.amzn2023.0.5
amazon linux 2023python3-capstone4.0.2-9.amzn2023.0.5
amazon linux 2023python3-capstone-debuginfo4.0.2-9.amzn2023.0.5
Azure Linux 3.0rust0:1.90.0-4.azl3
debian 11capstonekein Fix angegeben
debian 12capstonekein Fix angegeben
debian 13capstone5.0.7-1~deb13u1
debian 14capstone5.0.7-1
echocapstone5.0.7-1~deb13u1
Oracle Linux 9capstone4.0.2-11.el9_7
Oracle Linux 9capstone-devel4.0.2-11.el9_7
Oracle Linux 9capstone-java4.0.2-11.el9_7
Oracle Linux 9python3-capstone4.0.2-11.el9_7
rapidfort alma 9capstone4.0.2-13.el9_8
rapidfort alpine 3.20capstone5.0.7-r0
rapidfort alpine 3.21capstone5.0.7-r0
rapidfort alpine 3.22capstone5.0.7-r0
rapidfort alpine 3.23capstone5.0.7-r0
rapidfort alpine 3.24capstone5.0.7-r0
rapidfort amazon linux 2023capstone4.0.2-9.amzn2023.0.5
rapidfort amazon linux 2023capstone-devel4.0.2-9.amzn2023.0.5
rapidfort amazon linux 2023capstone-java4.0.2-9.amzn2023.0.5
rapidfort amazon linux 2023python3-capstone4.0.2-9.amzn2023.0.5
rapidfort debian 12capstone0:5.0.7-1, 0:5.0.7-1~deb13u1
rapidfort debian 13capstone0:5.0.7-1, 0:5.0.7-1~deb13u1
rapidfort fedora 43capstone5.0.5-8.fc43
rapidfort fedora 43capstone-devel5.0.5-8.fc43
rapidfort fedora 43capstone-java5.0.5-8.fc43
rapidfort fedora 43capstone-static5.0.5-8.fc43
rapidfort fedora 43python3-capstone5.0.5-8.fc43
rapidfort Oracle Linux 10capstone0:5.0.1-7.el10_1
rapidfort Oracle Linux 10capstone-devel0:5.0.1-7.el10_1
rapidfort Oracle Linux 10capstone-java0:5.0.1-7.el10_1
rapidfort Oracle Linux 10python3-capstone0:5.0.1-7.el10_1
rapidfort Oracle Linux 9capstone0:4.0.2-11.el9_7
rapidfort Oracle Linux 9capstone-devel0:4.0.2-11.el9_7
rapidfort Oracle Linux 9capstone-java0:4.0.2-11.el9_7
rapidfort Oracle Linux 9capstone-statickein Fix angegeben
rapidfort Oracle Linux 9python3-capstone0:4.0.2-11.el9_7
rocky 10capstone5.0.1-7.el10_1
rocky 9capstone4.0.2-11.el9_7

Referenzen

Alle 17 Referenzen

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.