Attestkeep
Dil: Türkçe
Kayıt ol

Zafiyetler / CVE-2025-68114

kritik

CVE-2025-68114

capstone: Capstone: Memory corruption via unchecked vsnprintf return

Yayın Değişiklik CWE 120, 124
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: AlmaLinux (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Red Hat (orta), Amazon (orta), Azure Linux (orta).

Açıklama

Capstone is a disassembly framework. In versions 6.0.0-Alpha5 and prior, an unchecked vsnprintf return in SStream_concat lets a malicious cs_opt_mem.vsnprintf drive SStream’s index negative or past the end, leading to a stack buffer underflow/overflow when the next write occurs. Commit 2c7797182a1618be12017d7d41e0b6581d5d529e fixes the issue.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
Photon OS 4.0capstone, capstone-devel4.0.2-2.ph4
Photon OS 5.0capstone, capstone-devel4.0.2-3.ph5
alma 10capstone-java, python3-capstone5.0.1-7.el10_1
alma 9capstone, capstone-devel, capstone-java ve 1 tane daha4.0.2-11.el9_7
alpine 3.23capstone5.0.7-r0
alpine 3.24capstone5.0.7-r0
alpine edgecapstone5.0.7-r0
amazon linux 2capstone, capstone-debuginfo, capstone-devel ve 2 tane daha3.0.5-1.amzn2.0.2
amazon linux 2023capstone, capstone-debuginfo, capstone-debugsource ve 4 tane daha4.0.2-9.amzn2023.0.5
Azure Linux 3.0rust0:1.90.0-4.azl3
debian 11capstonedüzeltme belirtilmemiş
debian 12capstonedüzeltme belirtilmemiş
30 kaynaktaki 63 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
Photon OS 4.0capstone4.0.2-2.ph4
Photon OS 4.0capstone-devel4.0.2-2.ph4
Photon OS 5.0capstone4.0.2-3.ph5
Photon OS 5.0capstone-devel4.0.2-3.ph5
alma 10capstone-java5.0.1-7.el10_1
alma 10python3-capstone5.0.1-7.el10_1
alma 9capstone4.0.2-11.el9_7
alma 9capstone-devel4.0.2-11.el9_7
alma 9capstone-java4.0.2-11.el9_7
alma 9python3-capstone4.0.2-11.el9_7
alpine 3.23capstone5.0.7-r0
alpine 3.24capstone5.0.7-r0
alpine edgecapstone5.0.7-r0
amazon linux 2capstone3.0.5-1.amzn2.0.2
amazon linux 2capstone-debuginfo3.0.5-1.amzn2.0.2
amazon linux 2capstone-devel3.0.5-1.amzn2.0.2
amazon linux 2capstone-java3.0.5-1.amzn2.0.2
amazon linux 2python2-capstone3.0.5-1.amzn2.0.2
amazon linux 2023capstone4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-debuginfo4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-debugsource4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-devel4.0.2-9.amzn2023.0.5
amazon linux 2023capstone-java4.0.2-9.amzn2023.0.5
amazon linux 2023python3-capstone4.0.2-9.amzn2023.0.5
amazon linux 2023python3-capstone-debuginfo4.0.2-9.amzn2023.0.5
Azure Linux 3.0rust0:1.90.0-4.azl3
debian 11capstonedüzeltme belirtilmemiş
debian 12capstonedüzeltme belirtilmemiş
debian 13capstone5.0.7-1~deb13u1
debian 14capstone5.0.7-1
echocapstone5.0.7-1~deb13u1
Oracle Linux 9capstone4.0.2-11.el9_7
Oracle Linux 9capstone-devel4.0.2-11.el9_7
Oracle Linux 9capstone-java4.0.2-11.el9_7
Oracle Linux 9python3-capstone4.0.2-11.el9_7
rapidfort alma 9capstone4.0.2-13.el9_8
rapidfort alpine 3.20capstone5.0.7-r0
rapidfort alpine 3.21capstone5.0.7-r0
rapidfort alpine 3.22capstone5.0.7-r0
rapidfort alpine 3.23capstone5.0.7-r0
rapidfort alpine 3.24capstone5.0.7-r0
rapidfort amazon linux 2023capstone4.0.2-9.amzn2023.0.5
rapidfort amazon linux 2023capstone-devel4.0.2-9.amzn2023.0.5
rapidfort amazon linux 2023capstone-java4.0.2-9.amzn2023.0.5
rapidfort amazon linux 2023python3-capstone4.0.2-9.amzn2023.0.5
rapidfort debian 12capstone0:5.0.7-1, 0:5.0.7-1~deb13u1
rapidfort debian 13capstone0:5.0.7-1, 0:5.0.7-1~deb13u1
rapidfort fedora 43capstone5.0.5-8.fc43
rapidfort fedora 43capstone-devel5.0.5-8.fc43
rapidfort fedora 43capstone-java5.0.5-8.fc43
rapidfort fedora 43capstone-static5.0.5-8.fc43
rapidfort fedora 43python3-capstone5.0.5-8.fc43
rapidfort Oracle Linux 10capstone0:5.0.1-7.el10_1
rapidfort Oracle Linux 10capstone-devel0:5.0.1-7.el10_1
rapidfort Oracle Linux 10capstone-java0:5.0.1-7.el10_1
rapidfort Oracle Linux 10python3-capstone0:5.0.1-7.el10_1
rapidfort Oracle Linux 9capstone0:4.0.2-11.el9_7
rapidfort Oracle Linux 9capstone-devel0:4.0.2-11.el9_7
rapidfort Oracle Linux 9capstone-java0:4.0.2-11.el9_7
rapidfort Oracle Linux 9capstone-staticdüzeltme belirtilmemiş
rapidfort Oracle Linux 9python3-capstone0:4.0.2-11.el9_7
rocky 10capstone5.0.1-7.el10_1
rocky 9capstone4.0.2-11.el9_7

Referanslar

17 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.