Attestkeep
Langue : Français
S'inscrire

Vulnérabilités / CVE-2025-7208

critique

CVE-2025-7208

A vulnerability was found in 9fans plan9port up to 9da5b44. It ha ...

Publiée Modifiée CWE 119, 122
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.

Sévérité par source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Le label propre à Trivy est CRITICAL. Critique selon NVD.

Description

A vulnerability was found in 9fans plan9port up to 9da5b44. It has been classified as critical. This affects the function edump in the library /src/plan9port/src/libsec/port/x509.c. The manipulation leads to heap-based buffer overflow. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is b3e06559475b0130a7a2fb56ac4d131d13d2012f. It is recommended to apply a patch to fix this issue.

Paquets affectés et versions corrigées

SourcePaquetCorrigé en
rapidfort alpine 3.20plan9portpas de correctif indiqué
rapidfort alpine 3.21plan9portpas de correctif indiqué
rapidfort alpine 3.22plan9portpas de correctif indiqué
rapidfort alpine 3.23plan9portpas de correctif indiqué
rapidfort alpine 3.24plan9portpas de correctif indiqué

Références

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.