Vulnerability-Lookup

CVE-2025-5318 (GCVE-0-2025-5318)

Vulnerability from cvelistv5 – Published: 2025-06-24 14:10 – Updated: 2026-03-18 20:41

Title

Libssh: out-of-bounds read in sftp_handle()

Summary

A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out-of-bounds Read

Assigner

redhat

References

30 references

URL	Tags
https://access.redhat.com/errata/RHSA-2025:18231	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18275	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:18286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19012	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19098	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19101	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19295	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19300	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19313	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19400	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19401	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19470	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19472	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19807	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:19864	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:20943	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21013	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21329	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:21829	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:22275	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23078	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23079	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2025:23080	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:0326	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:1541	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3461	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3462	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-5318	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2369131	issue-trackingx_refsource_REDHAT
https://www.libssh.org/security/advisories/CVE-20…

Impacted products

37 products

Vendor	Product	Version
		Affected: 0 , < 0.11.2 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.11.1-4.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.0
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:0.11.1-4.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 0:0.9.6-15.el8_10 , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream cpe:/o:redhat:enterprise_linux:8::baseos
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 0:0.9.0-4.el8_2.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.2::baseos cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 0:0.9.4-2.el8_4.1 , < * (rpm) cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 0:0.9.4-2.el8_4.1 , < * (rpm) cpe:/o:redhat:rhel_eus_long_life:8.4::baseos cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream cpe:/o:redhat:rhel_aus:8.4::baseos
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 0:0.9.6-4.el8_6.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/o:redhat:rhel_tus:8.6::baseos cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 0:0.9.6-4.el8_6.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/o:redhat:rhel_tus:8.6::baseos cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 0:0.9.6-4.el8_6.1 , < * (rpm) cpe:/o:redhat:rhel_aus:8.6::baseos cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/o:redhat:rhel_e4s:8.6::baseos cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/o:redhat:rhel_tus:8.6::baseos cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 0:0.9.6-13.el8_8.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/o:redhat:rhel_tus:8.8::baseos cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_e4s:8.8::baseos
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 0:0.9.6-13.el8_8.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/o:redhat:rhel_tus:8.8::baseos cpe:/a:redhat:rhel_tus:8.8::appstream cpe:/o:redhat:rhel_e4s:8.8::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-15.el9_6 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:0.10.4-15.el9_7 , < * (rpm) cpe:/o:redhat:enterprise_linux:9::baseos cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:0.9.6-3.el9_0.1 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::appstream cpe:/o:redhat:rhel_e4s:9.0::baseos
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:0.10.4-9.el9_2.1 , < * (rpm) cpe:/o:redhat:rhel_e4s:9.2::baseos cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:0.10.4-13.el9_4.1 , < * (rpm) cpe:/o:redhat:rhel_eus:9.4::baseos cpe:/a:redhat:rhel_eus:9.4::appstream
Red Hat	Red Hat OpenShift Container Platform 4.12	Unaffected: 412.86.202511191939-0 , < * (rpm) cpe:/a:redhat:openshift:4.12::el8
Red Hat	Red Hat OpenShift Container Platform 4.13	Unaffected: 413.92.202511261311-0 , < * (rpm) cpe:/a:redhat:openshift:4.13::el9
Red Hat	Red Hat OpenShift Container Platform 4.14	Unaffected: 414.92.202511122212-0 , < * (rpm) cpe:/a:redhat:openshift:4.14::el9
Red Hat	Red Hat OpenShift Container Platform 4.15	Unaffected: 415.92.202601271320-0 , < * (rpm) cpe:/a:redhat:openshift:4.15::el9
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202601071926-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat OpenShift Container Platform 4.17	Unaffected: 417.94.202510282022-0 , < * (rpm) cpe:/a:redhat:openshift:4.17::el9
Red Hat	Red Hat OpenShift Container Platform 4.18	Unaffected: 418.94.202511041748-0 , < * (rpm) cpe:/a:redhat:openshift:4.18::el9
Red Hat	Red Hat OpenShift Container Platform 4.19	Unaffected: 4.19.9.6.202510281054-0 , < * (rpm) cpe:/a:redhat:openshift:4.19::el9
Red Hat	Red Hat OpenShift Container Platform 4.20	Unaffected: 4.20.9.6.202510290321-0 , < * (rpm) cpe:/a:redhat:openshift:4.20::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57 , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat AI Inference Server 3.2	Unaffected: sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a , < * (rpm) cpe:/a:redhat:ai_inference_server:3.2::el9
Red Hat	Red Hat OpenShift distributed tracing 3.7.1	Unaffected: sha256:b5ee1febe929df3dd67df124aeb65d1920af553e667c2929a6865784ce546dc3 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.7::el8
Red Hat	Red Hat OpenShift distributed tracing 3.7.1	Unaffected: sha256:f242d27114fa7546df4d7261cccbd8586e9e6ba2487f02e260d8880807b94f43 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.7::el8
Red Hat	Red Hat OpenShift distributed tracing 3.7.1	Unaffected: sha256:dcbae88d4be5b004ff7473bcfbbd57946c773f7e77fc99da0b5b023310f55ddd , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.7::el8
Red Hat	Red Hat OpenShift distributed tracing 3.7.1	Unaffected: sha256:8ad291327a8410feb2d34afeb0d0c7f847a1cffc838883b65d71427b3f97670a , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.7::el8
Red Hat	Red Hat OpenShift distributed tracing 3.7.1	Unaffected: sha256:0fbed65da8c168be024b4ec28e9c5a860ce81c5bee69ebea24002407dc002be8 , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.7::el8
Red Hat	Red Hat OpenShift distributed tracing 3.7.1	Unaffected: sha256:83583f8010629b65533926a11163565efd4d8b32433fe279218b60cdb13da13f , < * (rpm) cpe:/a:redhat:openshift_distributed_tracing:3.7::el8

Date Public

2025-06-24 00:00

Credits

Red Hat would like to thank Ronald Crane for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-5318",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-03-18T20:41:38.314148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-03-18T20:41:54.510Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.libssh.org/",
          "defaultStatus": "unaffected",
          "packageName": "libssh",
          "versions": [
            {
              "lessThan": "0.11.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.11.1-4.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.1"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.11.1-4.el10_1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-15.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream",
            "cpe:/o:redhat:enterprise_linux:8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-15.el8_10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.2::baseos",
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.0-4.el8_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos",
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.4-2.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus_long_life:8.4::baseos",
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream",
            "cpe:/o:redhat:rhel_aus:8.4::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.4-2.el8_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/o:redhat:rhel_tus:8.6::baseos",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-4.el8_6.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/o:redhat:rhel_tus:8.6::baseos",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-4.el8_6.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_aus:8.6::baseos",
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/o:redhat:rhel_e4s:8.6::baseos",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/o:redhat:rhel_tus:8.6::baseos",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-4.el8_6.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/o:redhat:rhel_tus:8.8::baseos",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_e4s:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-13.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/o:redhat:rhel_tus:8.8::baseos",
            "cpe:/a:redhat:rhel_tus:8.8::appstream",
            "cpe:/o:redhat:rhel_e4s:8.8::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-13.el8_8.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-15.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-15.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-15.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:9::baseos",
            "cpe:/a:redhat:enterprise_linux:9::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-15.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream",
            "cpe:/o:redhat:rhel_e4s:9.0::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.9.6-3.el9_0.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_e4s:9.2::baseos",
            "cpe:/a:redhat:rhel_e4s:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-9.el9_2.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_eus:9.4::baseos",
            "cpe:/a:redhat:rhel_eus:9.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "libssh",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:0.10.4-13.el9_4.1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.12::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.12",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "412.86.202511191939-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.13::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.13",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "413.92.202511261311-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.14::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.14",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "414.92.202511122212-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.15::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.15",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "415.92.202601271320-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.16::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.16",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "416.94.202601071926-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.17::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.17",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "417.94.202510282022-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.18::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.18",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "418.94.202511041748-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.19::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.19",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.19.9.6.202510281054-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4.20::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4.20",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "4.20.9.6.202510290321-0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-rocm-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/model-opt-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-cuda-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ai_inference_server:3.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "rhaiis/vllm-rocm-rhel9",
          "product": "Red Hat AI Inference Server 3.2",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/tempo-gateway-opa-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:b5ee1febe929df3dd67df124aeb65d1920af553e667c2929a6865784ce546dc3",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/tempo-gateway-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:f242d27114fa7546df4d7261cccbd8586e9e6ba2487f02e260d8880807b94f43",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/tempo-jaeger-query-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:dcbae88d4be5b004ff7473bcfbbd57946c773f7e77fc99da0b5b023310f55ddd",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/tempo-query-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:8ad291327a8410feb2d34afeb0d0c7f847a1cffc838883b65d71427b3f97670a",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/tempo-rhel8",
          "product": "Red Hat OpenShift distributed tracing 3.7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:0fbed65da8c168be024b4ec28e9c5a860ce81c5bee69ebea24002407dc002be8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:openshift_distributed_tracing:3.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "rhosdt/tempo-rhel8-operator",
          "product": "Red Hat OpenShift distributed tracing 3.7.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "sha256:83583f8010629b65533926a11163565efd4d8b32433fe279218b60cdb13da13f",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Ronald Crane for reporting this issue."
        }
      ],
      "datePublic": "2025-06-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-02-27T17:05:15.158Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2025:18231",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:18231"
        },
        {
          "name": "RHSA-2025:18275",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:18275"
        },
        {
          "name": "RHSA-2025:18286",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:18286"
        },
        {
          "name": "RHSA-2025:19012",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19012"
        },
        {
          "name": "RHSA-2025:19098",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19098"
        },
        {
          "name": "RHSA-2025:19101",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19101"
        },
        {
          "name": "RHSA-2025:19295",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19295"
        },
        {
          "name": "RHSA-2025:19300",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19300"
        },
        {
          "name": "RHSA-2025:19313",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19313"
        },
        {
          "name": "RHSA-2025:19400",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19400"
        },
        {
          "name": "RHSA-2025:19401",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19401"
        },
        {
          "name": "RHSA-2025:19470",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19470"
        },
        {
          "name": "RHSA-2025:19472",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19472"
        },
        {
          "name": "RHSA-2025:19807",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19807"
        },
        {
          "name": "RHSA-2025:19864",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:19864"
        },
        {
          "name": "RHSA-2025:20943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:20943"
        },
        {
          "name": "RHSA-2025:21013",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21013"
        },
        {
          "name": "RHSA-2025:21329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21329"
        },
        {
          "name": "RHSA-2025:21829",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:21829"
        },
        {
          "name": "RHSA-2025:22275",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:22275"
        },
        {
          "name": "RHSA-2025:23078",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:23078"
        },
        {
          "name": "RHSA-2025:23079",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:23079"
        },
        {
          "name": "RHSA-2025:23080",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2025:23080"
        },
        {
          "name": "RHSA-2026:0326",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:0326"
        },
        {
          "name": "RHSA-2026:1541",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:1541"
        },
        {
          "name": "RHSA-2026:3461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3461"
        },
        {
          "name": "RHSA-2026:3462",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3462"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-5318"
        },
        {
          "name": "RHBZ#2369131",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369131"
        },
        {
          "url": "https://www.libssh.org/security/advisories/CVE-2025-5318.txt"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-05-29T06:48:59.169Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2025-06-24T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Libssh: out-of-bounds read in sftp_handle()",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-125: Out-of-bounds Read"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-5318",
    "datePublished": "2025-06-24T14:10:07.188Z",
    "dateReserved": "2025-05-29T07:01:42.703Z",
    "dateUpdated": "2026-03-18T20:41:54.510Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-5318",
      "date": "2026-06-05",
      "epss": "0.00178",
      "percentile": "0.39172"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-5318\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2025-06-24T14:15:30.523\",\"lastModified\":\"2026-02-27T17:16:24.440\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 una falla en la librer\u00eda libssh. Una lectura fuera de los l\u00edmites puede activarse en la funci\u00f3n sftp_handle debido a una comprobaci\u00f3n de comparaci\u00f3n incorrecta que permite que la funci\u00f3n acceda a memoria m\u00e1s all\u00e1 de la lista de manejadores v\u00e1lidos y devuelva un puntero no v\u00e1lido, que se utiliza en el procesamiento posterior. Esta vulnerabilidad permite que un atacante remoto autenticado lea regiones de memoria no deseadas, exponiendo informaci\u00f3n confidencial o afectando el comportamiento del servicio.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.2},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.2}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-125\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"932D137F-528B-4526-9A89-CD59FA1AB0FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F4CFF558-3C47-480D-A2F0-BABF26042943\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F6FB57C-2BC7-487C-96DD-132683AEB35D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D65C2163-CFC2-4ABB-8F4E-CB09CEBD006C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"0.11.2\",\"matchCriteriaId\":\"6E05F605-6E29-4F09-96DF-A1E1B29D0C3C\"}]}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18231\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18275\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:18286\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19012\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19098\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19101\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19295\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19300\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19313\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19400\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19401\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19470\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19472\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19807\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:19864\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:20943\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:21013\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:21329\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:21829\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:22275\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:23078\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:23079\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2025:23080\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:0326\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:1541\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3461\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:3462\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2025-5318\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2369131\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\",\"Third Party Advisory\"]},{\"url\":\"https://www.libssh.org/security/advisories/CVE-2025-5318.txt\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-5318\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-18T20:41:38.314148Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-24T14:29:15.706Z\"}}], \"cna\": {\"title\": \"Libssh: out-of-bounds read in sftp_handle()\", \"credits\": [{\"lang\": \"en\", \"value\": \"Red Hat would like to thank Ronald Crane for reporting this issue.\"}], \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.11.2\", \"versionType\": \"semver\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://www.libssh.org/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.1-4.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.11.1-4.el10_1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-15.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::appstream\", \"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-15.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.2::baseos\", \"cpe:/a:redhat:rhel_aus:8.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.2 Advanced Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.0-4.el8_2.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\", \"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\", \"cpe:/o:redhat:rhel_aus:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.4-2.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos\", \"cpe:/a:redhat:rhel_aus:8.4::appstream\", \"cpe:/a:redhat:rhel_eus_long_life:8.4::appstream\", \"cpe:/o:redhat:rhel_aus:8.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.4-2.el8_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-4.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-4.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\", \"cpe:/a:redhat:rhel_aus:8.6::appstream\", \"cpe:/o:redhat:rhel_e4s:8.6::baseos\", \"cpe:/a:redhat:rhel_e4s:8.6::appstream\", \"cpe:/o:redhat:rhel_tus:8.6::baseos\", \"cpe:/a:redhat:rhel_tus:8.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-4.el8_6.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-13.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::appstream\", \"cpe:/o:redhat:rhel_tus:8.8::baseos\", \"cpe:/a:redhat:rhel_tus:8.8::appstream\", \"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-13.el8_8.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\", \"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-15.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\", \"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-15.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\", \"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-15.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\", \"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-15.el9_7\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\", \"cpe:/o:redhat:rhel_e4s:9.0::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.6-3.el9_0.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.2::baseos\", \"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-9.el9_2.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.4::baseos\", \"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.10.4-13.el9_4.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libssh\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"412.86.202511191939-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"413.92.202511261311-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"414.92.202511122212-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"415.92.202601271320-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"416.94.202601071926-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"417.94.202510282022-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"418.94.202511041748-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.19.9.6.202510281054-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.20\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.20.9.6.202510290321-0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhcos\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:bddcf7ab6d576572b6d60822c313ffebcd9869e4fde93e32ac327821f93cf32b\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:7856bdb7ae0d643a7b9362c164d4d4fe3c0c7186f5fff73a7ae9835b3df52e57\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:dce6b0ea03379bf06664a5200af8b5f5ae3fad13cdce6d21873843f22554800b\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/model-opt-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:fa844e16d06e871f1a5dbc2fd5b3882d28112eee8d6bee601d94c96295c5e24f\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:53007894763e03f609c35c727cb738db3c2130b19fa0e1069c24240e0870fb7a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.7.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:b5ee1febe929df3dd67df124aeb65d1920af553e667c2929a6865784ce546dc3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-gateway-opa-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.7.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:f242d27114fa7546df4d7261cccbd8586e9e6ba2487f02e260d8880807b94f43\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-gateway-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.7.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:dcbae88d4be5b004ff7473bcfbbd57946c773f7e77fc99da0b5b023310f55ddd\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-jaeger-query-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.7.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:8ad291327a8410feb2d34afeb0d0c7f847a1cffc838883b65d71427b3f97670a\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-query-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.7.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:0fbed65da8c168be024b4ec28e9c5a860ce81c5bee69ebea24002407dc002be8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.7::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.7.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"sha256:83583f8010629b65533926a11163565efd4d8b32433fe279218b60cdb13da13f\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/tempo-rhel8-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-05-29T06:48:59.169Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2025-06-24T00:00:00.000Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2025-06-24T00:00:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2025:18231\", \"name\": \"RHSA-2025:18231\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18275\", \"name\": \"RHSA-2025:18275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:18286\", \"name\": \"RHSA-2025:18286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19012\", \"name\": \"RHSA-2025:19012\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19098\", \"name\": \"RHSA-2025:19098\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19101\", \"name\": \"RHSA-2025:19101\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19295\", \"name\": \"RHSA-2025:19295\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19300\", \"name\": \"RHSA-2025:19300\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19313\", \"name\": \"RHSA-2025:19313\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19400\", \"name\": \"RHSA-2025:19400\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19401\", \"name\": \"RHSA-2025:19401\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19470\", \"name\": \"RHSA-2025:19470\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19472\", \"name\": \"RHSA-2025:19472\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19807\", \"name\": \"RHSA-2025:19807\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:19864\", \"name\": \"RHSA-2025:19864\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:20943\", \"name\": \"RHSA-2025:20943\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:21013\", \"name\": \"RHSA-2025:21013\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:21329\", \"name\": \"RHSA-2025:21329\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:21829\", \"name\": \"RHSA-2025:21829\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:22275\", \"name\": \"RHSA-2025:22275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:23078\", \"name\": \"RHSA-2025:23078\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:23079\", \"name\": \"RHSA-2025:23079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2025:23080\", \"name\": \"RHSA-2025:23080\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:0326\", \"name\": \"RHSA-2026:0326\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:1541\", \"name\": \"RHSA-2026:1541\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3461\", \"name\": \"RHSA-2026:3461\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:3462\", \"name\": \"RHSA-2026:3462\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2025-5318\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2369131\", \"name\": \"RHBZ#2369131\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://www.libssh.org/security/advisories/CVE-2025-5318.txt\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-125\", \"description\": \"Out-of-bounds Read\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-02-27T17:05:15.158Z\"}, \"x_redhatCweChain\": \"CWE-125: Out-of-bounds Read\"}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-5318\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-18T20:41:54.510Z\", \"dateReserved\": \"2025-05-29T07:01:42.703Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2025-06-24T14:10:07.188Z\", \"assignerShortName\": \"redhat\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

SUSE-SU-2025:02279-1

Vulnerability from csaf_suse - Published: 2025-07-10 16:03 - Updated: 2025-07-10 16:03

Summary

Security update for libssh

Severity

Important

Notes

Title of the patch: Security update for libssh

Description of the patch: This update for libssh fixes the following issues: - CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309). - CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310). - CVE-2025-5318: Fixed likely read beyond bounds in sftp server handle management (bsc#1245311). - CVE-2025-5372: Fixed ssh_kdf() returns a success code on certain failures (bsc#1245314).

Patchnames: SUSE-2025-2279,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2279,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2279,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2279,SUSE-SUSE-MicroOS-5.1-2025-2279,SUSE-SUSE-MicroOS-5.2-2025-2279,SUSE-Storage-7.1-2025-2279

CVE-2025-4877

4.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 46 products

Product	Version	Remediation
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-4878

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 46 products

Product	Version	Remediation
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5318

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 46 products

Product	Version	Remediation
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5372

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Affected products

Recommended 46 products

Product	Version	Remediation
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64	—	Vendor Fix

Threats

Impact important

References

20 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2025…	self
https://bugzilla.suse.com/1245309	self
https://bugzilla.suse.com/1245310	self
https://bugzilla.suse.com/1245311	self
https://bugzilla.suse.com/1245314	self
https://www.suse.com/security/cve/CVE-2025-4877/	self
https://www.suse.com/security/cve/CVE-2025-4878/	self
https://www.suse.com/security/cve/CVE-2025-5318/	self
https://www.suse.com/security/cve/CVE-2025-5372/	self
https://www.suse.com/security/cve/CVE-2025-4877	external
https://bugzilla.suse.com/1245309	external
https://www.suse.com/security/cve/CVE-2025-4878	external
https://bugzilla.suse.com/1245310	external
https://www.suse.com/security/cve/CVE-2025-5318	external
https://bugzilla.suse.com/1245311	external
https://www.suse.com/security/cve/CVE-2025-5372	external
https://bugzilla.suse.com/1245314	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309).\n- CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310).\n- CVE-2025-5318: Fixed likely read beyond bounds in sftp server handle management (bsc#1245311).\n- CVE-2025-5372: Fixed ssh_kdf() returns a success code on certain failures (bsc#1245314).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-2279,SUSE-SLE-Product-HPC-15-SP3-LTSS-2025-2279,SUSE-SLE-Product-SLES-15-SP3-LTSS-2025-2279,SUSE-SLE-Product-SLES_SAP-15-SP3-2025-2279,SUSE-SUSE-MicroOS-5.1-2025-2279,SUSE-SUSE-MicroOS-5.2-2025-2279,SUSE-Storage-7.1-2025-2279",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02279-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:02279-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502279-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:02279-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040681.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245314",
        "url": "https://bugzilla.suse.com/1245314"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5372 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5372/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-07-10T16:03:25Z",
      "generator": {
        "date": "2025-07-10T16:03:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:02279-1",
      "initial_release_date": "2025-07-10T16:03:25Z",
      "revision_history": [
        {
          "date": "2025-07-10T16:03:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-150200.13.9.1.aarch64",
                "product": {
                  "name": "libssh-config-0.9.8-150200.13.9.1.aarch64",
                  "product_id": "libssh-config-0.9.8-150200.13.9.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-150200.13.9.1.aarch64",
                "product": {
                  "name": "libssh-devel-0.9.8-150200.13.9.1.aarch64",
                  "product_id": "libssh-devel-0.9.8-150200.13.9.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-150200.13.9.1.aarch64",
                "product": {
                  "name": "libssh4-0.9.8-150200.13.9.1.aarch64",
                  "product_id": "libssh4-0.9.8-150200.13.9.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh4-64bit-0.9.8-150200.13.9.1.aarch64_ilp32",
                "product": {
                  "name": "libssh4-64bit-0.9.8-150200.13.9.1.aarch64_ilp32",
                  "product_id": "libssh4-64bit-0.9.8-150200.13.9.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-150200.13.9.1.i586",
                "product": {
                  "name": "libssh-config-0.9.8-150200.13.9.1.i586",
                  "product_id": "libssh-config-0.9.8-150200.13.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-150200.13.9.1.i586",
                "product": {
                  "name": "libssh-devel-0.9.8-150200.13.9.1.i586",
                  "product_id": "libssh-devel-0.9.8-150200.13.9.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-150200.13.9.1.i586",
                "product": {
                  "name": "libssh4-0.9.8-150200.13.9.1.i586",
                  "product_id": "libssh4-0.9.8-150200.13.9.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-150200.13.9.1.ppc64le",
                "product": {
                  "name": "libssh-config-0.9.8-150200.13.9.1.ppc64le",
                  "product_id": "libssh-config-0.9.8-150200.13.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-150200.13.9.1.ppc64le",
                "product": {
                  "name": "libssh-devel-0.9.8-150200.13.9.1.ppc64le",
                  "product_id": "libssh-devel-0.9.8-150200.13.9.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-150200.13.9.1.ppc64le",
                "product": {
                  "name": "libssh4-0.9.8-150200.13.9.1.ppc64le",
                  "product_id": "libssh4-0.9.8-150200.13.9.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-150200.13.9.1.s390x",
                "product": {
                  "name": "libssh-config-0.9.8-150200.13.9.1.s390x",
                  "product_id": "libssh-config-0.9.8-150200.13.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-150200.13.9.1.s390x",
                "product": {
                  "name": "libssh-devel-0.9.8-150200.13.9.1.s390x",
                  "product_id": "libssh-devel-0.9.8-150200.13.9.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-150200.13.9.1.s390x",
                "product": {
                  "name": "libssh4-0.9.8-150200.13.9.1.s390x",
                  "product_id": "libssh4-0.9.8-150200.13.9.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-150200.13.9.1.x86_64",
                "product": {
                  "name": "libssh-config-0.9.8-150200.13.9.1.x86_64",
                  "product_id": "libssh-config-0.9.8-150200.13.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-150200.13.9.1.x86_64",
                "product": {
                  "name": "libssh-devel-0.9.8-150200.13.9.1.x86_64",
                  "product_id": "libssh-devel-0.9.8-150200.13.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-150200.13.9.1.x86_64",
                "product": {
                  "name": "libssh4-0.9.8-150200.13.9.1.x86_64",
                  "product_id": "libssh4-0.9.8-150200.13.9.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
                "product": {
                  "name": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
                  "product_id": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.1",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.1",
                  "product_id": "SUSE Linux Enterprise Micro 5.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.2",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.2",
                  "product_id": "SUSE Linux Enterprise Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-microos:5.2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7.1",
                "product": {
                  "name": "SUSE Enterprise Storage 7.1",
                  "product_id": "SUSE Enterprise Storage 7.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Micro 5.1",
          "product_id": "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.aarch64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.s390x as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.x86_64 as component of SUSE Linux Enterprise Micro 5.2",
          "product_id": "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.aarch64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-150200.13.9.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.aarch64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-150200.13.9.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh-devel-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.aarch64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-150200.13.9.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64 as component of SUSE Enterprise Storage 7.1",
          "product_id": "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        },
        "product_reference": "libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:03:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:03:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:03:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5372",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5372"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions\u0027 confidentiality, integrity, and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5372",
          "url": "https://www.suse.com/security/cve/CVE-2025-5372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245314 for CVE-2025-5372",
          "url": "https://bugzilla.suse.com/1245314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Enterprise Storage 7.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Enterprise Storage 7.1:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.1:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Micro 5.2:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.s390x",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP3-LTSS:libssh4-32bit-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-config-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh-devel-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-0.9.8-150200.13.9.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP3:libssh4-32bit-0.9.8-150200.13.9.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:03:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-5372"
    }
  ]
}

SUSE-SU-2025:02281-1

Vulnerability from csaf_suse - Published: 2025-07-10 16:05 - Updated: 2025-07-10 16:05

Summary

Security update for libssh

Severity

Important

Notes

Title of the patch: Security update for libssh

Patchnames: SUSE-2025-2281,SUSE-SLE-SERVER-12-SP5-LTSS-2025-2281,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2281

CVE-2025-4877

4.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 18 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-4878

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 18 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5318

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 18 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5372

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Affected products

Recommended 18 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64	—	Vendor Fix

Threats

Impact important

References

20 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2025…	self
https://bugzilla.suse.com/1245309	self
https://bugzilla.suse.com/1245310	self
https://bugzilla.suse.com/1245311	self
https://bugzilla.suse.com/1245314	self
https://www.suse.com/security/cve/CVE-2025-4877/	self
https://www.suse.com/security/cve/CVE-2025-4878/	self
https://www.suse.com/security/cve/CVE-2025-5318/	self
https://www.suse.com/security/cve/CVE-2025-5372/	self
https://www.suse.com/security/cve/CVE-2025-4877	external
https://bugzilla.suse.com/1245309	external
https://www.suse.com/security/cve/CVE-2025-4878	external
https://bugzilla.suse.com/1245310	external
https://www.suse.com/security/cve/CVE-2025-5318	external
https://bugzilla.suse.com/1245311	external
https://www.suse.com/security/cve/CVE-2025-5372	external
https://bugzilla.suse.com/1245314	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309).\n- CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310).\n- CVE-2025-5318: Fixed likely read beyond bounds in sftp server handle management (bsc#1245311).\n- CVE-2025-5372: Fixed ssh_kdf() returns a success code on certain failures (bsc#1245314).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-2281,SUSE-SLE-SERVER-12-SP5-LTSS-2025-2281,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2281",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02281-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:02281-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502281-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:02281-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040679.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245314",
        "url": "https://bugzilla.suse.com/1245314"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5372 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5372/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-07-10T16:05:33Z",
      "generator": {
        "date": "2025-07-10T16:05:33Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:02281-1",
      "initial_release_date": "2025-07-10T16:05:33Z",
      "revision_history": [
        {
          "date": "2025-07-10T16:05:33Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-3.15.1.aarch64",
                "product": {
                  "name": "libssh-config-0.9.8-3.15.1.aarch64",
                  "product_id": "libssh-config-0.9.8-3.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-3.15.1.aarch64",
                "product": {
                  "name": "libssh-devel-0.9.8-3.15.1.aarch64",
                  "product_id": "libssh-devel-0.9.8-3.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-3.15.1.aarch64",
                "product": {
                  "name": "libssh4-0.9.8-3.15.1.aarch64",
                  "product_id": "libssh4-0.9.8-3.15.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh4-64bit-0.9.8-3.15.1.aarch64_ilp32",
                "product": {
                  "name": "libssh4-64bit-0.9.8-3.15.1.aarch64_ilp32",
                  "product_id": "libssh4-64bit-0.9.8-3.15.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-3.15.1.i586",
                "product": {
                  "name": "libssh-config-0.9.8-3.15.1.i586",
                  "product_id": "libssh-config-0.9.8-3.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-3.15.1.i586",
                "product": {
                  "name": "libssh-devel-0.9.8-3.15.1.i586",
                  "product_id": "libssh-devel-0.9.8-3.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-3.15.1.i586",
                "product": {
                  "name": "libssh4-0.9.8-3.15.1.i586",
                  "product_id": "libssh4-0.9.8-3.15.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-3.15.1.ppc64le",
                "product": {
                  "name": "libssh-config-0.9.8-3.15.1.ppc64le",
                  "product_id": "libssh-config-0.9.8-3.15.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-3.15.1.ppc64le",
                "product": {
                  "name": "libssh-devel-0.9.8-3.15.1.ppc64le",
                  "product_id": "libssh-devel-0.9.8-3.15.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-3.15.1.ppc64le",
                "product": {
                  "name": "libssh4-0.9.8-3.15.1.ppc64le",
                  "product_id": "libssh4-0.9.8-3.15.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-3.15.1.s390",
                "product": {
                  "name": "libssh-config-0.9.8-3.15.1.s390",
                  "product_id": "libssh-config-0.9.8-3.15.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-3.15.1.s390",
                "product": {
                  "name": "libssh-devel-0.9.8-3.15.1.s390",
                  "product_id": "libssh-devel-0.9.8-3.15.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-3.15.1.s390",
                "product": {
                  "name": "libssh4-0.9.8-3.15.1.s390",
                  "product_id": "libssh4-0.9.8-3.15.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-3.15.1.s390x",
                "product": {
                  "name": "libssh-config-0.9.8-3.15.1.s390x",
                  "product_id": "libssh-config-0.9.8-3.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-3.15.1.s390x",
                "product": {
                  "name": "libssh-devel-0.9.8-3.15.1.s390x",
                  "product_id": "libssh-devel-0.9.8-3.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-3.15.1.s390x",
                "product": {
                  "name": "libssh4-0.9.8-3.15.1.s390x",
                  "product_id": "libssh4-0.9.8-3.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.9.8-3.15.1.s390x",
                "product": {
                  "name": "libssh4-32bit-0.9.8-3.15.1.s390x",
                  "product_id": "libssh4-32bit-0.9.8-3.15.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.9.8-3.15.1.x86_64",
                "product": {
                  "name": "libssh-config-0.9.8-3.15.1.x86_64",
                  "product_id": "libssh-config-0.9.8-3.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-0.9.8-3.15.1.x86_64",
                "product": {
                  "name": "libssh-devel-0.9.8-3.15.1.x86_64",
                  "product_id": "libssh-devel-0.9.8-3.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.9.8-3.15.1.x86_64",
                "product": {
                  "name": "libssh4-0.9.8-3.15.1.x86_64",
                  "product_id": "libssh4-0.9.8-3.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.9.8-3.15.1.x86_64",
                "product": {
                  "name": "libssh4-32bit-0.9.8-3.15.1.x86_64",
                  "product_id": "libssh4-32bit-0.9.8-3.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-3.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64"
        },
        "product_reference": "libssh-config-0.9.8-3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-3.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le"
        },
        "product_reference": "libssh-config-0.9.8-3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-3.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x"
        },
        "product_reference": "libssh-config-0.9.8-3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-3.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64"
        },
        "product_reference": "libssh-devel-0.9.8-3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-3.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le"
        },
        "product_reference": "libssh-devel-0.9.8-3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-3.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x"
        },
        "product_reference": "libssh-devel-0.9.8-3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh-devel-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-3.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64"
        },
        "product_reference": "libssh4-0.9.8-3.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-3.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le"
        },
        "product_reference": "libssh4-0.9.8-3.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-3.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x"
        },
        "product_reference": "libssh4-0.9.8-3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-3.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x"
        },
        "product_reference": "libssh4-32bit-0.9.8-3.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh4-32bit-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh-config-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh-devel-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh4-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-32bit-0.9.8-3.15.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
        },
        "product_reference": "libssh4-32bit-0.9.8-3.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:05:33Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:05:33Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:05:33Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5372",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5372"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions\u0027 confidentiality, integrity, and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5372",
          "url": "https://www.suse.com/security/cve/CVE-2025-5372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245314 for CVE-2025-5372",
          "url": "https://bugzilla.suse.com/1245314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh4-32bit-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-config-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-0.9.8-3.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh4-32bit-0.9.8-3.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-10T16:05:33Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-5372"
    }
  ]
}

SUSE-SU-2025:02755-1

Vulnerability from csaf_suse - Published: 2025-08-12 07:35 - Updated: 2025-08-12 07:35

Summary

Security update for libssh

Severity

Moderate

Notes

Title of the patch: Security update for libssh

Patchnames: SUSE-2025-2755,SUSE-SLE-SERVER-12-SP5-LTSS-2025-2755,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2755

CVE-2025-4877

4.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 5 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-4878

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 5 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5318

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 5 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

16 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2025…	self
https://bugzilla.suse.com/1245309	self
https://bugzilla.suse.com/1245310	self
https://bugzilla.suse.com/1245311	self
https://www.suse.com/security/cve/CVE-2025-4877/	self
https://www.suse.com/security/cve/CVE-2025-4878/	self
https://www.suse.com/security/cve/CVE-2025-5318/	self
https://www.suse.com/security/cve/CVE-2025-4877	external
https://bugzilla.suse.com/1245309	external
https://www.suse.com/security/cve/CVE-2025-4878	external
https://bugzilla.suse.com/1245310	external
https://www.suse.com/security/cve/CVE-2025-5318	external
https://bugzilla.suse.com/1245311	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-4877: Fixed write beyond bounds in binary to base64 conversion functions (bsc#1245309).\n- CVE-2025-4878: Fixed use of uninitialized variable in privatekey_from_file() (bsc#1245310).\n- CVE-2025-5318: Fixed likely read beyond bounds in sftp server handle management (bsc#1245311).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-2755,SUSE-SLE-SERVER-12-SP5-LTSS-2025-2755,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2755",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02755-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:02755-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502755-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:02755-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-August/041165.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-08-12T07:35:23Z",
      "generator": {
        "date": "2025-08-12T07:35:23Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:02755-1",
      "initial_release_date": "2025-08-12T07:35:23Z",
      "revision_history": [
        {
          "date": "2025-08-12T07:35:23Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.15.1.aarch64",
                "product": {
                  "name": "libssh-devel-0.6.3-12.15.1.aarch64",
                  "product_id": "libssh-devel-0.6.3-12.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.15.1.aarch64",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.15.1.aarch64",
                  "product_id": "libssh-devel-doc-0.6.3-12.15.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.15.1.aarch64",
                "product": {
                  "name": "libssh4-0.6.3-12.15.1.aarch64",
                  "product_id": "libssh4-0.6.3-12.15.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh4-64bit-0.6.3-12.15.1.aarch64_ilp32",
                "product": {
                  "name": "libssh4-64bit-0.6.3-12.15.1.aarch64_ilp32",
                  "product_id": "libssh4-64bit-0.6.3-12.15.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.15.1.i586",
                "product": {
                  "name": "libssh-devel-0.6.3-12.15.1.i586",
                  "product_id": "libssh-devel-0.6.3-12.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.15.1.i586",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.15.1.i586",
                  "product_id": "libssh-devel-doc-0.6.3-12.15.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.15.1.i586",
                "product": {
                  "name": "libssh4-0.6.3-12.15.1.i586",
                  "product_id": "libssh4-0.6.3-12.15.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.15.1.ppc64le",
                "product": {
                  "name": "libssh-devel-0.6.3-12.15.1.ppc64le",
                  "product_id": "libssh-devel-0.6.3-12.15.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.15.1.ppc64le",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.15.1.ppc64le",
                  "product_id": "libssh-devel-doc-0.6.3-12.15.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.15.1.ppc64le",
                "product": {
                  "name": "libssh4-0.6.3-12.15.1.ppc64le",
                  "product_id": "libssh4-0.6.3-12.15.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.15.1.s390",
                "product": {
                  "name": "libssh-devel-0.6.3-12.15.1.s390",
                  "product_id": "libssh-devel-0.6.3-12.15.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.15.1.s390",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.15.1.s390",
                  "product_id": "libssh-devel-doc-0.6.3-12.15.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.15.1.s390",
                "product": {
                  "name": "libssh4-0.6.3-12.15.1.s390",
                  "product_id": "libssh4-0.6.3-12.15.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.15.1.s390x",
                "product": {
                  "name": "libssh-devel-0.6.3-12.15.1.s390x",
                  "product_id": "libssh-devel-0.6.3-12.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.15.1.s390x",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.15.1.s390x",
                  "product_id": "libssh-devel-doc-0.6.3-12.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.15.1.s390x",
                "product": {
                  "name": "libssh4-0.6.3-12.15.1.s390x",
                  "product_id": "libssh4-0.6.3-12.15.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.6.3-12.15.1.s390x",
                "product": {
                  "name": "libssh4-32bit-0.6.3-12.15.1.s390x",
                  "product_id": "libssh4-32bit-0.6.3-12.15.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-devel-0.6.3-12.15.1.x86_64",
                "product": {
                  "name": "libssh-devel-0.6.3-12.15.1.x86_64",
                  "product_id": "libssh-devel-0.6.3-12.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh-devel-doc-0.6.3-12.15.1.x86_64",
                "product": {
                  "name": "libssh-devel-doc-0.6.3-12.15.1.x86_64",
                  "product_id": "libssh-devel-doc-0.6.3-12.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.6.3-12.15.1.x86_64",
                "product": {
                  "name": "libssh4-0.6.3-12.15.1.x86_64",
                  "product_id": "libssh4-0.6.3-12.15.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-32bit-0.6.3-12.15.1.x86_64",
                "product": {
                  "name": "libssh4-32bit-0.6.3-12.15.1.x86_64",
                  "product_id": "libssh4-32bit-0.6.3-12.15.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-doc-0.6.3-12.15.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64"
        },
        "product_reference": "libssh-devel-doc-0.6.3-12.15.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-doc-0.6.3-12.15.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le"
        },
        "product_reference": "libssh-devel-doc-0.6.3-12.15.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-doc-0.6.3-12.15.1.s390x as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x"
        },
        "product_reference": "libssh-devel-doc-0.6.3-12.15.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-doc-0.6.3-12.15.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64"
        },
        "product_reference": "libssh-devel-doc-0.6.3-12.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-devel-doc-0.6.3-12.15.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
        },
        "product_reference": "libssh-devel-doc-0.6.3-12.15.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-12T07:35:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-12T07:35:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
          "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.s390x",
            "SUSE Linux Enterprise Server 12 SP5-LTSS:libssh-devel-doc-0.6.3-12.15.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libssh-devel-doc-0.6.3-12.15.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-12T07:35:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    }
  ]
}

SUSE-SU-2025:20557-1

Vulnerability from csaf_suse - Published: 2025-08-14 09:26 - Updated: 2025-08-14 09:26

Summary

Security update for libssh

Severity

Important

Notes

Title of the patch: Security update for libssh

Description of the patch: This update for libssh fixes the following issues: - CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314) - CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317) - CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309) - CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310) - CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311) - CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)

Patchnames: SUSE-SLE-Micro-6.0-419

CVE-2025-4877

4.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 6 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-4878

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 6 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5318

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 6 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5351

6.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 6 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5372

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Affected products

Recommended 6 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2025-5987

5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 6 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

28 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2025…	self
https://bugzilla.suse.com/1245309	self
https://bugzilla.suse.com/1245310	self
https://bugzilla.suse.com/1245311	self
https://bugzilla.suse.com/1245312	self
https://bugzilla.suse.com/1245314	self
https://bugzilla.suse.com/1245317	self
https://www.suse.com/security/cve/CVE-2025-4877/	self
https://www.suse.com/security/cve/CVE-2025-4878/	self
https://www.suse.com/security/cve/CVE-2025-5318/	self
https://www.suse.com/security/cve/CVE-2025-5351/	self
https://www.suse.com/security/cve/CVE-2025-5372/	self
https://www.suse.com/security/cve/CVE-2025-5987/	self
https://www.suse.com/security/cve/CVE-2025-4877	external
https://bugzilla.suse.com/1245309	external
https://www.suse.com/security/cve/CVE-2025-4878	external
https://bugzilla.suse.com/1245310	external
https://www.suse.com/security/cve/CVE-2025-5318	external
https://bugzilla.suse.com/1245311	external
https://www.suse.com/security/cve/CVE-2025-5351	external
https://bugzilla.suse.com/1245312	external
https://www.suse.com/security/cve/CVE-2025-5372	external
https://bugzilla.suse.com/1245314	external
https://www.suse.com/security/cve/CVE-2025-5987	external
https://bugzilla.suse.com/1245317	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)\n- CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)\n- CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)\n- CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)\n- CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)\n- CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.0-419",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20557-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20557-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520557-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20557-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-August/041296.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245312",
        "url": "https://bugzilla.suse.com/1245312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245314",
        "url": "https://bugzilla.suse.com/1245314"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245317",
        "url": "https://bugzilla.suse.com/1245317"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5351 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5372 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5372/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5987 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5987/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-08-14T09:26:49Z",
      "generator": {
        "date": "2025-08-14T09:26:49Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20557-1",
      "initial_release_date": "2025-08-14T09:26:49Z",
      "revision_history": [
        {
          "date": "2025-08-14T09:26:49Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-2.1.aarch64",
                "product": {
                  "name": "libssh-config-0.10.6-2.1.aarch64",
                  "product_id": "libssh-config-0.10.6-2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-2.1.aarch64",
                "product": {
                  "name": "libssh4-0.10.6-2.1.aarch64",
                  "product_id": "libssh4-0.10.6-2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-2.1.s390x",
                "product": {
                  "name": "libssh-config-0.10.6-2.1.s390x",
                  "product_id": "libssh-config-0.10.6-2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-2.1.s390x",
                "product": {
                  "name": "libssh4-0.10.6-2.1.s390x",
                  "product_id": "libssh4-0.10.6-2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-2.1.x86_64",
                "product": {
                  "name": "libssh-config-0.10.6-2.1.x86_64",
                  "product_id": "libssh-config-0.10.6-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-2.1.x86_64",
                "product": {
                  "name": "libssh4-0.10.6-2.1.x86_64",
                  "product_id": "libssh4-0.10.6-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.0",
                "product": {
                  "name": "SUSE Linux Micro 6.0",
                  "product_id": "SUSE Linux Micro 6.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.0"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-2.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64"
        },
        "product_reference": "libssh-config-0.10.6-2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-2.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x"
        },
        "product_reference": "libssh-config-0.10.6-2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-2.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64"
        },
        "product_reference": "libssh-config-0.10.6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-2.1.aarch64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64"
        },
        "product_reference": "libssh4-0.10.6-2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-2.1.s390x as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x"
        },
        "product_reference": "libssh4-0.10.6-2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-2.1.x86_64 as component of SUSE Linux Micro 6.0",
          "product_id": "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        },
        "product_reference": "libssh4-0.10.6-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5351",
          "url": "https://www.suse.com/security/cve/CVE-2025-5351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245312 for CVE-2025-5351",
          "url": "https://bugzilla.suse.com/1245312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5351"
    },
    {
      "cve": "CVE-2025-5372",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5372"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions\u0027 confidentiality, integrity, and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5372",
          "url": "https://www.suse.com/security/cve/CVE-2025-5372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245314 for CVE-2025-5372",
          "url": "https://bugzilla.suse.com/1245314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-5987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
          "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5987",
          "url": "https://www.suse.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245317 for CVE-2025-5987",
          "url": "https://bugzilla.suse.com/1245317"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh-config-0.10.6-2.1.x86_64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.aarch64",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.s390x",
            "SUSE Linux Micro 6.0:libssh4-0.10.6-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T09:26:49Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5987"
    }
  ]
}

SUSE-SU-2025:20596-1

Vulnerability from csaf_suse - Published: 2025-08-14 10:14 - Updated: 2025-08-14 10:14

Summary

Security update for libssh

Severity

Important

Notes

Title of the patch: Security update for libssh

Patchnames: SUSE-SLE-Micro-6.1-213

CVE-2025-4877

4.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-4878

3.6 (Low)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5318

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5351

6.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-5372

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact important

CVE-2025-5987

5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact moderate

References

28 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1245309	self
https://bugzilla.suse.com/1245310	self
https://bugzilla.suse.com/1245311	self
https://bugzilla.suse.com/1245312	self
https://bugzilla.suse.com/1245314	self
https://bugzilla.suse.com/1245317	self
https://www.suse.com/security/cve/CVE-2025-4877/	self
https://www.suse.com/security/cve/CVE-2025-4878/	self
https://www.suse.com/security/cve/CVE-2025-5318/	self
https://www.suse.com/security/cve/CVE-2025-5351/	self
https://www.suse.com/security/cve/CVE-2025-5372/	self
https://www.suse.com/security/cve/CVE-2025-5987/	self
https://www.suse.com/security/cve/CVE-2025-4877	external
https://bugzilla.suse.com/1245309	external
https://www.suse.com/security/cve/CVE-2025-4878	external
https://bugzilla.suse.com/1245310	external
https://www.suse.com/security/cve/CVE-2025-5318	external
https://bugzilla.suse.com/1245311	external
https://www.suse.com/security/cve/CVE-2025-5351	external
https://bugzilla.suse.com/1245312	external
https://www.suse.com/security/cve/CVE-2025-5372	external
https://bugzilla.suse.com/1245314	external
https://www.suse.com/security/cve/CVE-2025-5987	external
https://bugzilla.suse.com/1245317	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for libssh",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for libssh fixes the following issues:\n\n- CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)\n- CVE-2025-5987: Invalid return code for chacha20 poly1305 with OpenSSL backend (bsc#1245317)\n- CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)\n- CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)\n- CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)\n- CVE-2025-5351: Double free in functions exporting keys (bsc#1245312)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-213",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_20596-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:20596-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202520596-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:20596-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022366.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245309",
        "url": "https://bugzilla.suse.com/1245309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245310",
        "url": "https://bugzilla.suse.com/1245310"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245311",
        "url": "https://bugzilla.suse.com/1245311"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245312",
        "url": "https://bugzilla.suse.com/1245312"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245314",
        "url": "https://bugzilla.suse.com/1245314"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1245317",
        "url": "https://bugzilla.suse.com/1245317"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4877 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4877/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-4878 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-4878/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5318 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5318/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5351 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5351/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5372 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5372/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-5987 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-5987/"
      }
    ],
    "title": "Security update for libssh",
    "tracking": {
      "current_release_date": "2025-08-14T10:14:25Z",
      "generator": {
        "date": "2025-08-14T10:14:25Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:20596-1",
      "initial_release_date": "2025-08-14T10:14:25Z",
      "revision_history": [
        {
          "date": "2025-08-14T10:14:25Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.aarch64",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.aarch64",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.s390x",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.s390x",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.s390x",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.s390x",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
                "product": {
                  "name": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
                  "product_id": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libssh4-0.10.6-slfo.1.1_2.1.x86_64",
                "product": {
                  "name": "libssh4-0.10.6-slfo.1.1_2.1.x86_64",
                  "product_id": "libssh4-0.10.6-slfo.1.1_2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64"
        },
        "product_reference": "libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libssh4-0.10.6-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        },
        "product_reference": "libssh4-0.10.6-slfo.1.1_2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4877"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There\u0027s a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerprint_hash() function. In such cases the bin_to_base64() function can experience an integer overflow leading to a memory under allocation, when that happens it\u0027s possible that the program perform out of bounds write leading to a heap corruption.\nThis issue affects only 32-bits builds of libssh.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4877",
          "url": "https://www.suse.com/security/cve/CVE-2025-4877"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245309 for CVE-2025-4877",
          "url": "https://bugzilla.suse.com/1245309"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-4878"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn\u0027t exist and may lead to possible signing failures or heap corruption.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-4878",
          "url": "https://www.suse.com/security/cve/CVE-2025-4878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245310 for CVE-2025-4878",
          "url": "https://bugzilla.suse.com/1245310"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.6,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5318"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the libssh library in versions less than 0.11.2. An out-of-bounds read can be triggered in the sftp_handle function due to an incorrect comparison check that permits the function to access memory beyond the valid handle list and to return an invalid pointer, which is used in further processing. This vulnerability allows an authenticated remote attacker to potentially read unintended memory regions, exposing sensitive information or affect service behavior.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5318",
          "url": "https://www.suse.com/security/cve/CVE-2025-5318"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245311 for CVE-2025-5318",
          "url": "https://bugzilla.suse.com/1245311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5351",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5351"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the key export functionality of libssh. The issue occurs in the internal function responsible for converting cryptographic keys into serialized formats. During error handling, a memory structure is freed but not cleared, leading to a potential double free issue if an additional failure occurs later in the function. This condition may result in heap corruption or application instability in low-memory scenarios, posing a risk to system reliability where key export operations are performed.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5351",
          "url": "https://www.suse.com/security/cve/CVE-2025-5351"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245312 for CVE-2025-5351",
          "url": "https://bugzilla.suse.com/1245312"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5351"
    },
    {
      "cve": "CVE-2025-5372",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5372"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the ssh_kdf() function responsible for key derivation. Due to inconsistent interpretation of return values where OpenSSL uses 0 to indicate failure and libssh uses 0 for success-the function may mistakenly return a success status even when key derivation fails. This results in uninitialized cryptographic key buffers being used in subsequent communication, potentially compromising SSH sessions\u0027 confidentiality, integrity, and availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5372",
          "url": "https://www.suse.com/security/cve/CVE-2025-5372"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245314 for CVE-2025-5372",
          "url": "https://bugzilla.suse.com/1245314"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-5987",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-5987"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with the SSH_OK code, resulting in libssh not properly detecting the error returned by the OpenSSL library. This issue can lead to undefined behavior, including compromised data confidentiality and integrity or crashes.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-5987",
          "url": "https://www.suse.com/security/cve/CVE-2025-5987"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1245317 for CVE-2025-5987",
          "url": "https://bugzilla.suse.com/1245317"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh-config-0.10.6-slfo.1.1_2.1.x86_64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:libssh4-0.10.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-08-14T10:14:25Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-5987"
    }
  ]
}

WID-SEC-W-2025-1385

Vulnerability from csaf_certbund - Published: 2025-06-24 22:00 - Updated: 2026-01-04 23:00

Summary

libssh: Schwachstelle ermöglicht Offenlegung von Informationen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: libssh ist eine C Bibliothek für das Anbieten von SSH Diensten auf Client- und Serverseite. Sie kann genutzt werden, um aus der Ferne Programme auszuführen, Dateien zu übertragen oder als sicherer und transparenter Tunnel für entfernte Programme genutzt werden.

Angriff: Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libssh ausnutzen, um Informationen offenzulegen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2025-5318

Affected products

Known affected 18 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
IBM Storwize IBM	`cpe:/a:ibm:storwize:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
IBM QRadar SIEM <7.5.0 UP14 IF01 IBM / QRadar SIEM		<7.5.0 UP14 IF01
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

References

52 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.libssh.org/security/advisories/CVE-20…	external
https://nvd.nist.gov/vuln/detail/CVE-2025-5318	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-7619-1	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-7696-1	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://www.ibm.com/support/pages/node/7246875	external
https://access.redhat.com/errata/RHSA-2025:18231	external
https://access.redhat.com/errata/RHSA-2025:18275	external
https://linux.oracle.com/errata/ELSA-2025-18231.html	external
https://linux.oracle.com/errata/ELSA-2025-18275.html	external
https://errata.build.resf.org/RLSA-2025:18275	external
https://access.redhat.com/errata/RHSA-2025:18286	external
https://errata.build.resf.org/RLSA-2025:18231	external
https://linux.oracle.com/errata/ELSA-2025-18286.html	external
https://access.redhat.com/errata/RHSA-2025:19012	external
https://access.redhat.com/errata/RHSA-2025:19098	external
https://access.redhat.com/errata/RHSA-2025:19101	external
https://www.dell.com/support/kbdoc/000385435	external
https://access.redhat.com/errata/RHSA-2025:19400	external
https://access.redhat.com/errata/RHSA-2025:19401	external
https://access.redhat.com/errata/RHSA-2025:19470	external
https://access.redhat.com/errata/RHSA-2025:19472	external
https://www.dell.com/support/kbdoc/000385230	external
https://access.redhat.com/errata/RHSA-2025:19295	external
https://access.redhat.com/errata/RHSA-2025:19300	external
https://access.redhat.com/errata/RHSA-2025:19313	external
https://access.redhat.com/errata/RHSA-2025:19807	external
https://access.redhat.com/errata/RHSA-2025:21013	external
https://access.redhat.com/errata/RHSA-2025:20943	external
https://errata.build.resf.org/RLSA-2025:20943	external
https://www.ibm.com/support/pages/node/7250971	external
https://www.ibm.com/support/pages/node/7250955	external
https://access.redhat.com/errata/RHSA-2025:19864	external
https://linux.oracle.com/errata/ELSA-2025-20943.html	external
https://access.redhat.com/errata/RHSA-2025:21829	external
https://www.meinberg.de/german/news/meinberg-secu…	external
https://errata.build.resf.org/RLSA-2025:18286	external
https://linux.oracle.com/errata/ELSA-2025-21013.html	external
https://access.redhat.com/errata/RHSA-2025:22275	external
https://access.redhat.com/errata/RHSA-2025:23080	external
https://access.redhat.com/errata/RHSA-2025:23078	external
https://access.redhat.com/errata/RHSA-2025:23079	external
https://www.ibm.com/support/pages/node/7256201	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "libssh ist eine C Bibliothek f\u00fcr das Anbieten von SSH Diensten auf Client- und Serverseite. Sie kann genutzt werden, um aus der Ferne Programme auszuf\u00fchren, Dateien zu \u00fcbertragen oder als sicherer und transparenter Tunnel f\u00fcr entfernte Programme genutzt werden.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in libssh ausnutzen, um Informationen offenzulegen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1385 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1385.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1385 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1385"
      },
      {
        "category": "external",
        "summary": "libssh Security Advisory vom 2025-06-24",
        "url": "https://www.libssh.org/security/advisories/CVE-2025-5318.txt"
      },
      {
        "category": "external",
        "summary": "NIST Vulnerability Database vom 2025-06-24",
        "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5318"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02229-1 vom 2025-07-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021759.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7619-1 vom 2025-07-07",
        "url": "https://ubuntu.com/security/notices/USN-7619-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02278-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021792.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02279-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021791.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02281-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021789.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2025-18E8506D3A vom 2025-07-22",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-18e8506d3a"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02755-1 vom 2025-08-12",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022132.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20557-1 vom 2025-08-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022231.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7696-1 vom 2025-08-19",
        "url": "https://ubuntu.com/security/notices/USN-7696-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20596-1 vom 2025-08-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022366.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7246875 vom 2025-10-01",
        "url": "https://www.ibm.com/support/pages/node/7246875"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18231 vom 2025-10-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:18231"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18275 vom 2025-10-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:18275"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-18231 vom 2025-10-16",
        "url": "https://linux.oracle.com/errata/ELSA-2025-18231.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-18275 vom 2025-10-17",
        "url": "https://linux.oracle.com/errata/ELSA-2025-18275.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18275 vom 2025-10-18",
        "url": "https://errata.build.resf.org/RLSA-2025:18275"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory",
        "url": "https://access.redhat.com/errata/RHSA-2025:18286"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18231 vom 2025-10-18",
        "url": "https://errata.build.resf.org/RLSA-2025:18231"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-18286 vom 2025-10-20",
        "url": "https://linux.oracle.com/errata/ELSA-2025-18286.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19012 vom 2025-10-23",
        "url": "https://access.redhat.com/errata/RHSA-2025:19012"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19098 vom 2025-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:19098"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19101 vom 2025-10-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:19101"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-404 vom 2025-10-31",
        "url": "https://www.dell.com/support/kbdoc/000385435"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19400 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19400"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19401 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19401"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19470 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19470"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19472 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19472"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-390 vom 2025-11-05",
        "url": "https://www.dell.com/support/kbdoc/000385230"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19295 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19295"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19300 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19300"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19313 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19313"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19807 vom 2025-11-08",
        "url": "https://access.redhat.com/errata/RHSA-2025:19807"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21013 vom 2025-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:21013"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:20943 vom 2025-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:20943"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:20943 vom 2025-11-12",
        "url": "https://errata.build.resf.org/RLSA-2025:20943"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7250971 vom 2025-11-12",
        "url": "https://www.ibm.com/support/pages/node/7250971"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7250955 vom 2025-11-14",
        "url": "https://www.ibm.com/support/pages/node/7250955"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19864 vom 2025-11-17",
        "url": "https://access.redhat.com/errata/RHSA-2025:19864"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-20943 vom 2025-11-26",
        "url": "https://linux.oracle.com/errata/ELSA-2025-20943.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21829 vom 2025-11-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:21829"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2025.05 vom 2025-11-27",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-05-lantime-firmware-v7-08-025.htm"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18286 vom 2025-11-28",
        "url": "https://errata.build.resf.org/RLSA-2025:18286"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-21013 vom 2025-12-04",
        "url": "https://linux.oracle.com/errata/ELSA-2025-21013.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:22275 vom 2025-12-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:22275"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23080 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23080"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23078 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23078"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23079 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23079"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7256201 vom 2026-01-05",
        "url": "https://www.ibm.com/support/pages/node/7256201"
      }
    ],
    "source_lang": "en-US",
    "title": "libssh: Schwachstelle erm\u00f6glicht Offenlegung von Informationen",
    "tracking": {
      "current_release_date": "2026-01-04T23:00:00.000+00:00",
      "generator": {
        "date": "2026-01-05T08:36:44.209+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1385",
      "initial_release_date": "2025-06-24T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-24T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-07-06T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-07T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2025-07-10T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-21T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2025-08-11T22:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-08-19T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE und Ubuntu aufgenommen"
        },
        {
          "date": "2025-08-31T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-10-01T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-10-15T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-16T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat und Oracle Linux aufgenommen"
        },
        {
          "date": "2025-10-19T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
        },
        {
          "date": "2025-10-22T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-26T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-30T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-02T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-04T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Dell und Red Hat aufgenommen"
        },
        {
          "date": "2025-11-05T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-09T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-11T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-12T23:00:00.000+00:00",
          "number": "21",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-11-16T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-11-17T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-25T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-11-26T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-27T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2025-12-03T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-12-07T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-12-10T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-04T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "30"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Avamar",
            "product": {
              "name": "Dell Avamar",
              "product_id": "T039664",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:avamar:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Virtual Edition",
                "product": {
                  "name": "Dell NetWorker Virtual Edition",
                  "product_id": "T048226",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:virtual_edition"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Appliance \u003c5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance \u003c5.32.00.18",
                  "product_id": "T048301"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance 5.32.00.18",
                  "product_id": "T048301-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:secure_connect_gateway:appliance__5.32.00.18"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Secure Connect Gateway"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c12.16.0",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c12.16.0",
                  "product_id": "T047348"
                }
              },
              {
                "category": "product_version",
                "name": "12.16.0",
                "product": {
                  "name": "IBM App Connect Enterprise 12.16.0",
                  "product_id": "T047348-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:12.16.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.0.16",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c12.0.16",
                  "product_id": "T047349"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.16",
                "product": {
                  "name": "IBM App Connect Enterprise 12.0.16",
                  "product_id": "T047349-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:12.0.16"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "App Connect Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP14 IF01",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP14 IF01",
                  "product_id": "T048556"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP14 IF01",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP14 IF01",
                  "product_id": "T048556-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up14_if01"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.0.9.1",
                "product": {
                  "name": "IBM Security Verify Access \u003c10.0.9.1",
                  "product_id": "T049459"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.9.1",
                "product": {
                  "name": "IBM Security Verify Access 10.0.9.1",
                  "product_id": "T049459-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_verify_access:v10.0.9.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Verify Access"
          },
          {
            "category": "product_name",
            "name": "IBM Storwize",
            "product": {
              "name": "IBM Storwize",
              "product_id": "T021621",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:storwize:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.08.025",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.08.025",
                  "product_id": "T048944"
                }
              },
              {
                "category": "product_version",
                "name": "7.08.025",
                "product": {
                  "name": "Meinberg LANTIME 7.08.025",
                  "product_id": "T048944-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.08.025"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c0.11.2",
                "product": {
                  "name": "Open Source libssh \u003c0.11.2",
                  "product_id": "T044818"
                }
              },
              {
                "category": "product_version",
                "name": "0.11.2",
                "product": {
                  "name": "Open Source libssh 0.11.2",
                  "product_id": "T044818-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:libssh:libssh:0.11.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "libssh"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "67646",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "T037727",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.17.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.17.43",
                  "product_id": "T048318"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.17.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.17.43",
                  "product_id": "T048318-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.17.43"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-5318",
      "product_status": {
        "known_affected": [
          "T037727",
          "67646",
          "T044818",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T021621",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T000126",
          "T049459",
          "T048226",
          "T048556",
          "T048301"
        ]
      },
      "release_date": "2025-06-24T22:00:00.000+00:00",
      "title": "CVE-2025-5318"
    }
  ]
}

WID-SEC-W-2025-1423

Vulnerability from csaf_certbund - Published: 2025-06-29 22:00 - Updated: 2026-03-04 23:00

Summary

libssh: Mehrere Schwachstellen

Severity

Mittel

Notes

Angriff: Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um einen Denial of Service Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und potentiell weitere nicht spezifizierte Auswirkungen zu verursachen.

Betroffene Betriebssysteme: - Linux - Sonstiges - UNIX - Windows

CVE-2025-4877

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

CVE-2025-5351

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

CVE-2025-5449

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

CVE-2025-4878

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

CVE-2025-5318

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

CVE-2025-5372

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

CVE-2025-5987

Affected products

Known affected 21 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:8`	—
NetApp AFF Baseboard Management Controller NetApp / AFF	`cpe:/h:netapp:aff:::baseboard_management_controller`	Baseboard Management Controller
NetApp ActiveIQ Unified Manager for VMware vSphere NetApp / ActiveIQ Unified Manager	`cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere`	for VMware vSphere
Red Hat Enterprise Linux Red Hat / Enterprise Linux	`cpe:/o:redhat:enterprise_linux:-`	—
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—
Fedora Linux Fedora	`cpe:/o:fedoraproject:fedora:-`	—
Dell Avamar Dell	`cpe:/a:dell:avamar:-`	—
Red Hat OpenShift Container Platform <4.17.43 Red Hat / OpenShift		Container Platform <4.17.43
IBM App Connect Enterprise <12.16.0 IBM / App Connect Enterprise		<12.16.0
Meinberg LANTIME <7.08.025 Meinberg / LANTIME		<7.08.025
IBM App Connect Enterprise <12.0.16 IBM / App Connect Enterprise		<12.0.16
SUSE Linux SUSE	`cpe:/o:suse:suse_linux:-`	—
NetApp FAS Baseboard Management Controller NetApp / FAS	`cpe:/h:netapp:fas:baseboard_management_controller`	Baseboard Management Controller
Open Source libssh <0.11.2 Open Source / libssh		<0.11.2
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Red Hat OpenShift Container Platform <4.20.12 Red Hat / OpenShift		Container Platform <4.20.12
IBM QRadar SIEM <7.5.0 UP14 IF03 IBM / QRadar SIEM		<7.5.0 UP14 IF03
IBM Security Verify Access <10.0.9.1 IBM / Security Verify Access		<10.0.9.1
Dell NetWorker Virtual Edition Dell / NetWorker	`cpe:/a:dell:networker:virtual_edition`	Virtual Edition
Dell Secure Connect Gateway Appliance <5.32.00.18 Dell / Secure Connect Gateway		Appliance <5.32.00.18

References

64 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.libssh.org/2025/06/24/libssh-0-11-2-s…	external
https://seclists.org/oss-sec/2025/q2/284	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-7619-1	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://bodhi.fedoraproject.org/updates/FEDORA-20…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://ubuntu.com/security/notices/USN-7696-1	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://lists.suse.com/pipermail/sle-security-upd…	external
https://www.ibm.com/support/pages/node/7246875	external
https://access.redhat.com/errata/RHSA-2025:18231	external
https://linux.oracle.com/errata/ELSA-2025-18275.html	external
https://errata.build.resf.org/RLSA-2025:18275	external
https://access.redhat.com/errata/RHSA-2025:18286	external
https://errata.build.resf.org/RLSA-2025:18231	external
https://www.dell.com/support/kbdoc/000385435	external
https://access.redhat.com/errata/RHSA-2025:19401	external
https://access.redhat.com/errata/RHSA-2025:19400	external
https://access.redhat.com/errata/RHSA-2025:19470	external
https://access.redhat.com/errata/RHSA-2025:19472	external
https://www.dell.com/support/kbdoc/000385230	external
https://access.redhat.com/errata/RHSA-2025:19300	external
https://access.redhat.com/errata/RHSA-2025:19313	external
https://access.redhat.com/errata/RHSA-2025:19807	external
https://access.redhat.com/errata/RHSA-2025:21013	external
https://access.redhat.com/errata/RHSA-2025:20943	external
https://access.redhat.com/errata/RHSA-2025:21977	external
https://errata.build.resf.org/RLSA-2025:21977	external
https://linux.oracle.com/errata/ELSA-2025-21977.html	external
https://access.redhat.com/errata/RHSA-2025:21829	external
https://www.meinberg.de/german/news/meinberg-secu…	external
https://errata.build.resf.org/RLSA-2025:18286	external
https://security.netapp.com/advisory/NTAP-20251128-0005	external
https://linux.oracle.com/errata/ELSA-2025-21013.html	external
https://access.redhat.com/errata/RHSA-2025:23024	external
https://access.redhat.com/errata/RHSA-2025:23484	external
https://www.ibm.com/support/pages/node/7255154	external
https://linux.oracle.com/errata/ELSA-2025-23484.html	external
https://errata.build.resf.org/RLSA-2025:23484	external
https://access.redhat.com/errata/RHSA-2025:23483	external
https://linux.oracle.com/errata/ELSA-2025-23483.html	external
https://errata.build.resf.org/RLSA-2025:23483	external
https://www.ibm.com/support/pages/node/7256201	external
https://access.redhat.com/errata/RHSA-2026:0431	external
https://access.redhat.com/errata/RHSA-2026:0428	external
https://access.redhat.com/errata/RHSA-2026:0430	external
https://access.redhat.com/errata/RHSA-2026:0427	external
https://access.redhat.com/errata/RHSA-2026:0934	external
https://access.redhat.com/errata/RHSA-2026:0950	external
https://access.redhat.com/errata/RHSA-2026:0702	external
https://access.redhat.com/errata/RHSA-2026:0978	external
https://access.redhat.com/errata/RHSA-2026:0996	external
https://access.redhat.com/errata/RHSA-2026:0985	external
https://access.redhat.com/errata/RHSA-2026:0980	external
https://access.redhat.com/errata/RHSA-2026:1539	external
https://access.redhat.com/errata/RHSA-2026:1541	external
https://access.redhat.com/errata/RHSA-2026:3461	external
https://access.redhat.com/errata/RHSA-2026:3462	external
https://access.redhat.com/errata/RHSA-2026:3415	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "libssh ist eine C Bibliothek f\u00fcr das Anbieten von SSH Diensten auf Client- und Serverseite. Sie kann genutzt werden, um aus der Ferne Programme auszuf\u00fchren, Dateien zu \u00fcbertragen oder als sicherer und transparenter Tunnel f\u00fcr entfernte Programme genutzt werden.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und potentiell weitere nicht spezifizierte Auswirkungen zu verursachen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1423 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1423.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1423 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1423"
      },
      {
        "category": "external",
        "summary": "libssh. org vom 2025-06-29",
        "url": "https://www.libssh.org/2025/06/24/libssh-0-11-2-security-and-bugfix-release/"
      },
      {
        "category": "external",
        "summary": "libssh security and bugfix release vom 2025-06-29",
        "url": "https://seclists.org/oss-sec/2025/q2/284"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02229-1 vom 2025-07-04",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021759.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7619-1 vom 2025-07-07",
        "url": "https://ubuntu.com/security/notices/USN-7619-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02281-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021789.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02279-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021791.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02278-1 vom 2025-07-10",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-July/021792.html"
      },
      {
        "category": "external",
        "summary": "Fedora Security Advisory FEDORA-2025-18E8506D3A vom 2025-07-22",
        "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-18e8506d3a"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:02755-1 vom 2025-08-12",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022132.html"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7696-1 vom 2025-08-19",
        "url": "https://ubuntu.com/security/notices/USN-7696-1"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20557-1 vom 2025-08-19",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022231.html"
      },
      {
        "category": "external",
        "summary": "SUSE Security Update SUSE-SU-2025:20596-1 vom 2025-08-29",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2025-August/022366.html"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7246875 vom 2025-10-01",
        "url": "https://www.ibm.com/support/pages/node/7246875"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:18231 vom 2025-10-16",
        "url": "https://access.redhat.com/errata/RHSA-2025:18231"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-18275 vom 2025-10-17",
        "url": "https://linux.oracle.com/errata/ELSA-2025-18275.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18275 vom 2025-10-18",
        "url": "https://errata.build.resf.org/RLSA-2025:18275"
      },
      {
        "category": "external",
        "summary": "RedHat Security Advisory",
        "url": "https://access.redhat.com/errata/RHSA-2025:18286"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18231 vom 2025-10-18",
        "url": "https://errata.build.resf.org/RLSA-2025:18231"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-404 vom 2025-10-31",
        "url": "https://www.dell.com/support/kbdoc/000385435"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19401 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19401"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19400 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19400"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19470 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19470"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19472 vom 2025-11-03",
        "url": "https://access.redhat.com/errata/RHSA-2025:19472"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2025-390 vom 2025-11-05",
        "url": "https://www.dell.com/support/kbdoc/000385230"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19300 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19300"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19313 vom 2025-11-05",
        "url": "https://access.redhat.com/errata/RHSA-2025:19313"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:19807 vom 2025-11-08",
        "url": "https://access.redhat.com/errata/RHSA-2025:19807"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21013 vom 2025-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:21013"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:20943 vom 2025-11-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:20943"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21977 vom 2025-11-24",
        "url": "https://access.redhat.com/errata/RHSA-2025:21977"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:21977 vom 2025-11-25",
        "url": "https://errata.build.resf.org/RLSA-2025:21977"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-21977 vom 2025-11-25",
        "url": "https://linux.oracle.com/errata/ELSA-2025-21977.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:21829 vom 2025-11-27",
        "url": "https://access.redhat.com/errata/RHSA-2025:21829"
      },
      {
        "category": "external",
        "summary": "Meinberg Security Advisory MBGSA-2025.05 vom 2025-11-27",
        "url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-05-lantime-firmware-v7-08-025.htm"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:18286 vom 2025-11-28",
        "url": "https://errata.build.resf.org/RLSA-2025:18286"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20251128-0005 vom 2025-11-28",
        "url": "https://security.netapp.com/advisory/NTAP-20251128-0005"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-21013 vom 2025-12-04",
        "url": "https://linux.oracle.com/errata/ELSA-2025-21013.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23024 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23024"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23484 vom 2025-12-18",
        "url": "https://access.redhat.com/errata/RHSA-2025:23484"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7255154 vom 2025-12-17",
        "url": "https://www.ibm.com/support/pages/node/7255154"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23484 vom 2025-12-18",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23484.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23484 vom 2025-12-18",
        "url": "https://errata.build.resf.org/RLSA-2025:23484"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23483 vom 2025-12-18",
        "url": "https://access.redhat.com/errata/RHSA-2025:23483"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23483 vom 2025-12-18",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23483.html"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23483 vom 2025-12-19",
        "url": "https://errata.build.resf.org/RLSA-2025:23483"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 7256201 vom 2026-01-05",
        "url": "https://www.ibm.com/support/pages/node/7256201"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0431 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0431"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0428 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0428"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0430 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0430"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0427 vom 2026-01-12",
        "url": "https://access.redhat.com/errata/RHSA-2026:0427"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0934 vom 2026-01-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:0934"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0950 vom 2026-01-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:0950"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0702 vom 2026-01-22",
        "url": "https://access.redhat.com/errata/RHSA-2026:0702"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0978 vom 2026-01-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:0978"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0996 vom 2026-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2026:0996"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0985 vom 2026-01-30",
        "url": "https://access.redhat.com/errata/RHSA-2026:0985"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:0980 vom 2026-02-03",
        "url": "https://access.redhat.com/errata/RHSA-2026:0980"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:1539 vom 2026-02-04",
        "url": "https://access.redhat.com/errata/RHSA-2026:1539"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:1541 vom 2026-02-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:1541"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3461 vom 2026-02-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:3461"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3462 vom 2026-02-27",
        "url": "https://access.redhat.com/errata/RHSA-2026:3462"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2026:3415 vom 2026-03-05",
        "url": "https://access.redhat.com/errata/RHSA-2026:3415"
      }
    ],
    "source_lang": "en-US",
    "title": "libssh: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-03-04T23:00:00.000+00:00",
      "generator": {
        "date": "2026-03-05T11:42:16.523+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-1423",
      "initial_release_date": "2025-06-29T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-06-29T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-07-06T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-07T22:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2025-07-10T22:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-07-21T22:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Fedora aufgenommen"
        },
        {
          "date": "2025-07-22T22:00:00.000+00:00",
          "number": "6",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-22335"
        },
        {
          "date": "2025-08-11T22:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-08-19T22:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Ubuntu und SUSE aufgenommen"
        },
        {
          "date": "2025-08-31T22:00:00.000+00:00",
          "number": "9",
          "summary": "Neue Updates von SUSE aufgenommen"
        },
        {
          "date": "2025-10-01T22:00:00.000+00:00",
          "number": "10",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2025-10-15T22:00:00.000+00:00",
          "number": "11",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-10-16T22:00:00.000+00:00",
          "number": "12",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-10-19T22:00:00.000+00:00",
          "number": "13",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
        },
        {
          "date": "2025-10-30T23:00:00.000+00:00",
          "number": "14",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-02T23:00:00.000+00:00",
          "number": "15",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-04T23:00:00.000+00:00",
          "number": "16",
          "summary": "Neue Updates von Dell aufgenommen"
        },
        {
          "date": "2025-11-05T23:00:00.000+00:00",
          "number": "17",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-09T23:00:00.000+00:00",
          "number": "18",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-11T23:00:00.000+00:00",
          "number": "19",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-24T23:00:00.000+00:00",
          "number": "20",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-25T23:00:00.000+00:00",
          "number": "21",
          "summary": "doppelter Eintrag entfernt"
        },
        {
          "date": "2025-11-26T23:00:00.000+00:00",
          "number": "22",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-11-27T23:00:00.000+00:00",
          "number": "23",
          "summary": "Neue Updates von Meinberg aufgenommen"
        },
        {
          "date": "2025-12-03T23:00:00.000+00:00",
          "number": "24",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        },
        {
          "date": "2025-12-09T23:00:00.000+00:00",
          "number": "25",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-12-17T23:00:00.000+00:00",
          "number": "26",
          "summary": "Neue Updates von Red Hat, IBM und Oracle Linux aufgenommen"
        },
        {
          "date": "2025-12-18T23:00:00.000+00:00",
          "number": "27",
          "summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
        },
        {
          "date": "2026-01-04T23:00:00.000+00:00",
          "number": "28",
          "summary": "Neue Updates von IBM aufgenommen"
        },
        {
          "date": "2026-01-11T23:00:00.000+00:00",
          "number": "29",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-12T23:00:00.000+00:00",
          "number": "30",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-21T23:00:00.000+00:00",
          "number": "31",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-22T23:00:00.000+00:00",
          "number": "32",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-01-27T23:00:00.000+00:00",
          "number": "33",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-01T23:00:00.000+00:00",
          "number": "34",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-03T23:00:00.000+00:00",
          "number": "35",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-04T23:00:00.000+00:00",
          "number": "36",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-02-05T23:00:00.000+00:00",
          "number": "37",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-01T23:00:00.000+00:00",
          "number": "38",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2026-03-04T23:00:00.000+00:00",
          "number": "39",
          "summary": "Neue Updates von Red Hat aufgenommen"
        }
      ],
      "status": "final",
      "version": "39"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell Avamar",
            "product": {
              "name": "Dell Avamar",
              "product_id": "T039664",
              "product_identification_helper": {
                "cpe": "cpe:/a:dell:avamar:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Virtual Edition",
                "product": {
                  "name": "Dell NetWorker Virtual Edition",
                  "product_id": "T048226",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:networker:virtual_edition"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "NetWorker"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Appliance \u003c5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance \u003c5.32.00.18",
                  "product_id": "T048301"
                }
              },
              {
                "category": "product_version",
                "name": "Appliance 5.32.00.18",
                "product": {
                  "name": "Dell Secure Connect Gateway Appliance 5.32.00.18",
                  "product_id": "T048301-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:dell:secure_connect_gateway:appliance__5.32.00.18"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Secure Connect Gateway"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Fedora Linux",
            "product": {
              "name": "Fedora Linux",
              "product_id": "74185",
              "product_identification_helper": {
                "cpe": "cpe:/o:fedoraproject:fedora:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Fedora"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c12.16.0",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c12.16.0",
                  "product_id": "T047348"
                }
              },
              {
                "category": "product_version",
                "name": "12.16.0",
                "product": {
                  "name": "IBM App Connect Enterprise 12.16.0",
                  "product_id": "T047348-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:12.16.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.0.16",
                "product": {
                  "name": "IBM App Connect Enterprise \u003c12.0.16",
                  "product_id": "T047349"
                }
              },
              {
                "category": "product_version",
                "name": "12.0.16",
                "product": {
                  "name": "IBM App Connect Enterprise 12.0.16",
                  "product_id": "T047349-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:app_connect_enterprise:12.0.16"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "App Connect Enterprise"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.5.0 UP14 IF03",
                "product": {
                  "name": "IBM QRadar SIEM \u003c7.5.0 UP14 IF03",
                  "product_id": "T049499"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0 UP14 IF03",
                "product": {
                  "name": "IBM QRadar SIEM 7.5.0 UP14 IF03",
                  "product_id": "T049499-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up14_if03"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "QRadar SIEM"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c10.0.9.1",
                "product": {
                  "name": "IBM Security Verify Access \u003c10.0.9.1",
                  "product_id": "T049459"
                }
              },
              {
                "category": "product_version",
                "name": "10.0.9.1",
                "product": {
                  "name": "IBM Security Verify Access 10.0.9.1",
                  "product_id": "T049459-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:ibm:security_verify_access:v10.0.9.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Security Verify Access"
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c7.08.025",
                "product": {
                  "name": "Meinberg LANTIME \u003c7.08.025",
                  "product_id": "T048944"
                }
              },
              {
                "category": "product_version",
                "name": "7.08.025",
                "product": {
                  "name": "Meinberg LANTIME 7.08.025",
                  "product_id": "T048944-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:meinberg:lantime:7.08.025"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "LANTIME"
          }
        ],
        "category": "vendor",
        "name": "Meinberg"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Baseboard Management Controller",
                "product": {
                  "name": "NetApp AFF Baseboard Management Controller",
                  "product_id": "T025086",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:netapp:aff:::baseboard_management_controller"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "AFF"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "for VMware vSphere",
                "product": {
                  "name": "NetApp ActiveIQ Unified Manager for VMware vSphere",
                  "product_id": "T025152",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "ActiveIQ Unified Manager"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Baseboard Management Controller",
                "product": {
                  "name": "NetApp FAS Baseboard Management Controller",
                  "product_id": "T043535",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:netapp:fas:baseboard_management_controller"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FAS"
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c0.11.2",
                "product": {
                  "name": "Open Source libssh \u003c0.11.2",
                  "product_id": "T044955"
                }
              },
              {
                "category": "product_version",
                "name": "0.11.2",
                "product": {
                  "name": "Open Source libssh 0.11.2",
                  "product_id": "T044955-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:libssh:libssh:0.11.2"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "libssh"
          }
        ],
        "category": "vendor",
        "name": "Open Source"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "67646",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:-"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux",
                "product": {
                  "name": "Red Hat Enterprise Linux",
                  "product_id": "T037727",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:8"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.17.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.17.43",
                  "product_id": "T048318"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.17.43",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.17.43",
                  "product_id": "T048318-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.17.43"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "Container Platform \u003c4.20.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform \u003c4.20.12",
                  "product_id": "T050329"
                }
              },
              {
                "category": "product_version",
                "name": "Container Platform 4.20.12",
                "product": {
                  "name": "Red Hat OpenShift Container Platform 4.20.12",
                  "product_id": "T050329-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:openshift:container_platform__4.20.12"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "OpenShift"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "SUSE Linux",
            "product": {
              "name": "SUSE Linux",
              "product_id": "T002207",
              "product_identification_helper": {
                "cpe": "cpe:/o:suse:suse_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-4877",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-5351",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5351"
    },
    {
      "cve": "CVE-2025-5449",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5449"
    },
    {
      "cve": "CVE-2025-4878",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-5318",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5372",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-5987",
      "product_status": {
        "known_affected": [
          "T037727",
          "T025086",
          "T025152",
          "67646",
          "T004914",
          "T032255",
          "74185",
          "T039664",
          "T048318",
          "T047348",
          "T048944",
          "T047349",
          "T002207",
          "T043535",
          "T044955",
          "T000126",
          "T050329",
          "T049499",
          "T049459",
          "T048226",
          "T048301"
        ]
      },
      "release_date": "2025-06-29T22:00:00.000+00:00",
      "title": "CVE-2025-5987"
    }
  ]
}

WID-SEC-W-2025-2360

Vulnerability from csaf_certbund - Published: 2025-10-21 22:00 - Updated: 2025-11-17 23:00

Summary

Oracle Communications Applications: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Communications Applications umfasst eine Sammlung von Werkzeugen zur Verwaltung von Messaging-, Kommunikationsdiensten und -ressourcen.

Angriff: Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Betroffene Betriebssysteme: - Linux - Sonstiges - Windows

CVE-2024-12133

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-28182

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-35164

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-37371

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-50609

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-51504

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-57699

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-7254

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2024-8006

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-27210

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-27533

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-27553

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-27817

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-32415

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-32990

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-4517

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-48734

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-48924

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-48976

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-48989

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-49796

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-5115

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-52999

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-5318

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-53864

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-5399

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-54090

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-55163

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-5889

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-59375

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-6965

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-7339

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-8058

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

CVE-2025-9086

Affected products

Known affected 24 products

Product	Identifier	Version
Oracle Communications Applications 7.4.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.1`	7.4.1
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Communications Applications 7.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.7.0`	7.7.0
Oracle Communications Applications 8.0.0.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.8.0`	8.0.0.8.0
Oracle Communications Applications 8.1.0.28 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.28`	8.1.0.28
Oracle Communications Applications 8.0.0.7.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.7.0`	8.0.0.7.0
Oracle Communications Applications 7.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.0`	7.5.0
Oracle Communications Applications 7.8.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.8.0`	7.8.0
Oracle Communications Applications 8.0.0.9.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.9.0`	8.0.0.9.0
Oracle Communications Applications 2.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.0.0`	2.0.0.0.0
Oracle Communications Applications 2.0.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:2.0.0.1.0`	2.0.0.1.0
Oracle Communications Applications 15.0.1.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.1.0.0`	15.0.1.0.0
Oracle Communications Applications 6.1.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:6.1.1`	6.1.1
Oracle Communications Applications 7.5.1 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.5.1`	7.5.1
Oracle Communications Applications 7.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.4.0`	7.4.0
Oracle Communications Applications 15.1.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.1.0.0.0`	15.1.0.0.0
Oracle Communications Applications 3.0.3.3.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.3.0`	3.0.3.3.0
Oracle Communications Applications 8.0.0.5.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.0.0.5.0`	8.0.0.5.0
Oracle Communications Applications 3.0.3.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:3.0.3.4.0`	3.0.3.4.0
Oracle Communications Applications 15.0.0.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:15.0.0.0.0`	15.0.0.0.0
Oracle Communications Applications 8.1.0.4.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.1.0.4.0`	8.1.0.4.0
Oracle Communications Applications 12.0.6.0.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:12.0.6.0.0`	12.0.6.0.0
Oracle Communications Applications 7.3.6 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:7.3.6`	7.3.6
Oracle Communications Applications 8.2.0.1.0 Oracle / Communications Applications	`cpe:/a:oracle:communications_applications:8.2.0.1.0`	8.2.0.1.0

Last affected 7 products

Product	Identifier	Version	Remediation
Oracle Communications Applications <=7.8.0 Oracle / Communications Applications		<=7.8.0
Oracle Communications Applications <=6.1.1 Oracle / Communications Applications		<=6.1.1
Oracle Communications Applications <=12.0.0.8.0 Oracle / Communications Applications		<=12.0.0.8.0
Oracle Communications Applications <=7.5.1 Oracle / Communications Applications		<=7.5.1
Oracle Communications Applications <=15.0.1.0.0 Oracle / Communications Applications		<=15.0.1.0.0
Oracle Communications Applications <=2.0.0.1.0 Oracle / Communications Applications		<=2.0.0.1.0
Oracle Communications Applications <=12.0.6.0.0 Oracle / Communications Applications		<=12.0.6.0.0

References

4 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.oracle.com/security-alerts/cpuoct2025…	external
https://security.business.xerox.com/wp-content/up…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Communications Applications umfasst eine Sammlung von Werkzeugen zur Verwaltung von Messaging-, Kommunikationsdiensten und -ressourcen.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-2360 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2360.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-2360 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2360"
      },
      {
        "category": "external",
        "summary": "Oracle Critical Patch Update Advisory - October 2025 - Appendix Oracle Communications Applications vom 2025-10-21",
        "url": "https://www.oracle.com/security-alerts/cpuoct2025.html#AppendixCAGBU"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-018 vom 2025-11-18",
        "url": "https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf"
      }
    ],
    "source_lang": "en-US",
    "title": "Oracle Communications Applications: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-11-17T23:00:00.000+00:00",
      "generator": {
        "date": "2025-11-18T08:13:07.419+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-2360",
      "initial_release_date": "2025-10-21T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-10-21T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-11-17T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von XEROX aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=2.0.0.1.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=2.0.0.1.0",
                  "product_id": "T047971"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=2.0.0.1.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=2.0.0.1.0",
                  "product_id": "T047971-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=12.0.6.0.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=12.0.6.0.0",
                  "product_id": "T047972"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=12.0.6.0.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=12.0.6.0.0",
                  "product_id": "T047972-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=15.0.1.0.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=15.0.1.0.0",
                  "product_id": "T047973"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=15.0.1.0.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=15.0.1.0.0",
                  "product_id": "T047973-fixed"
                }
              },
              {
                "category": "product_version",
                "name": "15.1.0.0.0",
                "product": {
                  "name": "Oracle Communications Applications 15.1.0.0.0",
                  "product_id": "T047974",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:15.1.0.0.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.1.0.28",
                "product": {
                  "name": "Oracle Communications Applications 8.1.0.28",
                  "product_id": "T047975",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.1.0.28"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=6.1.1",
                "product": {
                  "name": "Oracle Communications Applications \u003c=6.1.1",
                  "product_id": "T047976"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=6.1.1",
                "product": {
                  "name": "Oracle Communications Applications \u003c=6.1.1",
                  "product_id": "T047976-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=7.8.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=7.8.0",
                  "product_id": "T047977"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=7.8.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=7.8.0",
                  "product_id": "T047977-fixed"
                }
              },
              {
                "category": "product_version",
                "name": "8.0.0.8.0",
                "product": {
                  "name": "Oracle Communications Applications 8.0.0.8.0",
                  "product_id": "T047978",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.0.0.8.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.0.0.9.0",
                "product": {
                  "name": "Oracle Communications Applications 8.0.0.9.0",
                  "product_id": "T047979",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.0.0.9.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.0.0.0.0",
                "product": {
                  "name": "Oracle Communications Applications 2.0.0.0.0",
                  "product_id": "T047980",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:2.0.0.0.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.0.0.1.0",
                "product": {
                  "name": "Oracle Communications Applications 2.0.0.1.0",
                  "product_id": "T047981",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:2.0.0.1.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "3.0.3.4.0",
                "product": {
                  "name": "Oracle Communications Applications 3.0.3.4.0",
                  "product_id": "T047982",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:3.0.3.4.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "12.0.6.0.0",
                "product": {
                  "name": "Oracle Communications Applications 12.0.6.0.0",
                  "product_id": "T047983",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:12.0.6.0.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.4.0",
                "product": {
                  "name": "Oracle Communications Applications 7.4.0",
                  "product_id": "T047984",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.4.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15.0.1.0.0",
                "product": {
                  "name": "Oracle Communications Applications 15.0.1.0.0",
                  "product_id": "T047992",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:15.0.1.0.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "15.0.0.0.0",
                "product": {
                  "name": "Oracle Communications Applications 15.0.0.0.0",
                  "product_id": "T047993",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:15.0.0.0.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.3.6",
                "product": {
                  "name": "Oracle Communications Applications 7.3.6",
                  "product_id": "T047994",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.3.6"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "3.0.3.3.0",
                "product": {
                  "name": "Oracle Communications Applications 3.0.3.3.0",
                  "product_id": "T047996",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:3.0.3.3.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.0.0.7.0",
                "product": {
                  "name": "Oracle Communications Applications 8.0.0.7.0",
                  "product_id": "T047997",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.0.0.7.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.8.0",
                "product": {
                  "name": "Oracle Communications Applications 7.8.0",
                  "product_id": "T047998",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.8.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.7.0",
                "product": {
                  "name": "Oracle Communications Applications 7.7.0",
                  "product_id": "T047999",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.7.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.5.1",
                "product": {
                  "name": "Oracle Communications Applications 7.5.1",
                  "product_id": "T048000",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.5.1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "6.1.1",
                "product": {
                  "name": "Oracle Communications Applications 6.1.1",
                  "product_id": "T048001",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:6.1.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=7.5.1",
                "product": {
                  "name": "Oracle Communications Applications \u003c=7.5.1",
                  "product_id": "T048003"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=7.5.1",
                "product": {
                  "name": "Oracle Communications Applications \u003c=7.5.1",
                  "product_id": "T048003-fixed"
                }
              },
              {
                "category": "product_version",
                "name": "8.2.0.1.0",
                "product": {
                  "name": "Oracle Communications Applications 8.2.0.1.0",
                  "product_id": "T048004",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.2.0.1.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.1.0.4.0",
                "product": {
                  "name": "Oracle Communications Applications 8.1.0.4.0",
                  "product_id": "T048005",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.1.0.4.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.0.0.5.0",
                "product": {
                  "name": "Oracle Communications Applications 8.0.0.5.0",
                  "product_id": "T048006",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:8.0.0.5.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=12.0.0.8.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=12.0.0.8.0",
                  "product_id": "T048008"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=12.0.0.8.0",
                "product": {
                  "name": "Oracle Communications Applications \u003c=12.0.0.8.0",
                  "product_id": "T048008-fixed"
                }
              },
              {
                "category": "product_version",
                "name": "7.5.0",
                "product": {
                  "name": "Oracle Communications Applications 7.5.0",
                  "product_id": "T048009",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.5.0"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "7.4.1",
                "product": {
                  "name": "Oracle Communications Applications 7.4.1",
                  "product_id": "T048010",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:communications_applications:7.4.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Communications Applications"
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T035098",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-12133",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-12133"
    },
    {
      "cve": "CVE-2024-28182",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-28182"
    },
    {
      "cve": "CVE-2024-35164",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-35164"
    },
    {
      "cve": "CVE-2024-37371",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-37371"
    },
    {
      "cve": "CVE-2024-50609",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-50609"
    },
    {
      "cve": "CVE-2024-51504",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-51504"
    },
    {
      "cve": "CVE-2024-57699",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-57699"
    },
    {
      "cve": "CVE-2024-7254",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-7254"
    },
    {
      "cve": "CVE-2024-8006",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-8006"
    },
    {
      "cve": "CVE-2025-27210",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-27210"
    },
    {
      "cve": "CVE-2025-27533",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-27533"
    },
    {
      "cve": "CVE-2025-27553",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-27553"
    },
    {
      "cve": "CVE-2025-27817",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-27817"
    },
    {
      "cve": "CVE-2025-32415",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-32415"
    },
    {
      "cve": "CVE-2025-32990",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-32990"
    },
    {
      "cve": "CVE-2025-4517",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-4517"
    },
    {
      "cve": "CVE-2025-48734",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-48734"
    },
    {
      "cve": "CVE-2025-48924",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-48924"
    },
    {
      "cve": "CVE-2025-48976",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-48976"
    },
    {
      "cve": "CVE-2025-48989",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-48989"
    },
    {
      "cve": "CVE-2025-49796",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-5115",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-5115"
    },
    {
      "cve": "CVE-2025-52999",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-52999"
    },
    {
      "cve": "CVE-2025-5318",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-53864",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53864"
    },
    {
      "cve": "CVE-2025-5399",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-5399"
    },
    {
      "cve": "CVE-2025-54090",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-54090"
    },
    {
      "cve": "CVE-2025-55163",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-55163"
    },
    {
      "cve": "CVE-2025-5889",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-5889"
    },
    {
      "cve": "CVE-2025-59375",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-59375"
    },
    {
      "cve": "CVE-2025-6965",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-6965"
    },
    {
      "cve": "CVE-2025-7339",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-7339"
    },
    {
      "cve": "CVE-2025-8058",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-8058"
    },
    {
      "cve": "CVE-2025-9086",
      "product_status": {
        "known_affected": [
          "T048010",
          "T035098",
          "T047999",
          "T047978",
          "T047975",
          "T047997",
          "T048009",
          "T047998",
          "T047979",
          "T047980",
          "T047981",
          "T047992",
          "T048001",
          "T048000",
          "T047984",
          "T047974",
          "T047996",
          "T048006",
          "T047982",
          "T047993",
          "T048005",
          "T047983",
          "T047994",
          "T048004"
        ],
        "last_affected": [
          "T047977",
          "T047976",
          "T048008",
          "T048003",
          "T047973",
          "T047971",
          "T047972"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-9086"
    }
  ]
}

WID-SEC-W-2025-2363

Vulnerability from csaf_certbund - Published: 2025-10-21 22:00 - Updated: 2025-12-14 23:00

Summary

Oracle MySQL: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: MySQL ist ein Open Source Datenbankserver von Oracle.

Angriff: Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Betroffene Betriebssysteme: - Linux - Sonstiges - Windows

CVE-2024-12133

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2024-35195

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-4517

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-49796

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53040

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53042

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53044

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53045

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53053

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53054

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53062

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53067

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-53069

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-5318

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-5399

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

CVE-2025-6965

Affected products

Known affected 5 products

Product	Identifier	Version
Red Hat Enterprise Linux Red Hat	`cpe:/o:redhat:enterprise_linux:-`	—
Ubuntu Linux Ubuntu	`cpe:/o:canonical:ubuntu_linux:-`	—
Xerox FreeFlow Print Server v7 Xerox / FreeFlow Print Server	`cpe:/a:xerox:freeflow_print_server:v7`	v7
Oracle Linux Oracle	`cpe:/o:oracle:linux:-`	—
RESF Rocky Linux RESF	`cpe:/o:resf:rocky_linux:-`	—

Last affected 9 products

Product	Identifier	Version	Remediation
Oracle MySQL <=9.3.0 Oracle / MySQL		<=9.3.0
Oracle MySQL <=8.4.5 Oracle / MySQL		<=8.4.5
Oracle MySQL <=8.0.42 Oracle / MySQL		<=8.0.42
Oracle MySQL <=9.1.0 Oracle / MySQL		<=9.1.0
Oracle MySQL <=8.0.43 Oracle / MySQL		<=8.0.43
Oracle MySQL <=8.4.6 Oracle / MySQL		<=8.4.6
Oracle MySQL <=8.4.3 Oracle / MySQL		<=8.4.3
Oracle MySQL <=9.4.0 Oracle / MySQL		<=9.4.0
Oracle MySQL <=8.0.40 Oracle / MySQL		<=8.0.40

References

20 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.oracle.com/security-alerts/cpuoct2025…	external
https://security.business.xerox.com/wp-content/up…	external
https://ubuntu.com/security/notices/USN-7873-1	external
https://access.redhat.com/errata/RHSA-2025:23008	external
http://linux.oracle.com/errata/ELSA-2025-23008.html	external
https://access.redhat.com/errata/RHSA-2025:23109	external
https://access.redhat.com/errata/RHSA-2025:23137	external
https://access.redhat.com/errata/RHSA-2025:23111	external
https://access.redhat.com/errata/RHSA-2025:23134	external
https://errata.build.resf.org/RLSA-2025:23008	external
https://errata.build.resf.org/RLSA-2025:23137	external
https://errata.build.resf.org/RLSA-2025:23111	external
https://errata.build.resf.org/RLSA-2025:23134	external
https://errata.build.resf.org/RLSA-2025:23109	external
https://linux.oracle.com/errata/ELSA-2025-23137.html	external
https://linux.oracle.com/errata/ELSA-2025-23109.html	external
https://linux.oracle.com/errata/ELSA-2025-23111.html	external
https://linux.oracle.com/errata/ELSA-2025-23134.html	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "MySQL ist ein Open Source Datenbankserver von Oracle.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Linux\n- Sonstiges\n- Windows",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-2363 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2363.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-2363 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2363"
      },
      {
        "category": "external",
        "summary": "Oracle Critical Patch Update Advisory - October 2025 - Appendix Oracle MySQL vom 2025-10-21",
        "url": "https://www.oracle.com/security-alerts/cpuoct2025.html#AppendixMSQL"
      },
      {
        "category": "external",
        "summary": "XEROX Security Advisory XRX25-018 vom 2025-11-18",
        "url": "https://security.business.xerox.com/wp-content/uploads/2025/11/Xerox-Security-Bulletin-XRX25-018-Xerox-FreeFlow-Print-Server-v7.pdf"
      },
      {
        "category": "external",
        "summary": "Ubuntu Security Notice USN-7873-1 vom 2025-11-20",
        "url": "https://ubuntu.com/security/notices/USN-7873-1"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23008 vom 2025-12-10",
        "url": "https://access.redhat.com/errata/RHSA-2025:23008"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23008 vom 2025-12-11",
        "url": "http://linux.oracle.com/errata/ELSA-2025-23008.html"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23109 vom 2025-12-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:23109"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23137 vom 2025-12-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:23137"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23111 vom 2025-12-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:23111"
      },
      {
        "category": "external",
        "summary": "Red Hat Security Advisory RHSA-2025:23134 vom 2025-12-11",
        "url": "https://access.redhat.com/errata/RHSA-2025:23134"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23008 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23008"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23137 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23137"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23111 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23111"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23134 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23134"
      },
      {
        "category": "external",
        "summary": "Rocky Linux Security Advisory RLSA-2025:23109 vom 2025-12-12",
        "url": "https://errata.build.resf.org/RLSA-2025:23109"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23137 vom 2025-12-12",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23137.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23109 vom 2025-12-13",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23109.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23111 vom 2025-12-12",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23111.html"
      },
      {
        "category": "external",
        "summary": "Oracle Linux Security Advisory ELSA-2025-23134 vom 2025-12-13",
        "url": "https://linux.oracle.com/errata/ELSA-2025-23134.html"
      }
    ],
    "source_lang": "en-US",
    "title": "Oracle MySQL: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-12-14T23:00:00.000+00:00",
      "generator": {
        "date": "2025-12-15T10:25:57.164+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-2363",
      "initial_release_date": "2025-10-21T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-10-21T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2025-10-22T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-35267, EUVD-2025-35280, EUVD-2025-35294, EUVD-2025-35265, EUVD-2025-35272, EUVD-2025-35290, EUVD-2025-35289, EUVD-2025-35292, EUVD-2025-35281"
        },
        {
          "date": "2025-11-17T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates von XEROX aufgenommen"
        },
        {
          "date": "2025-11-20T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von Ubuntu aufgenommen"
        },
        {
          "date": "2025-12-09T23:00:00.000+00:00",
          "number": "5",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-12-10T23:00:00.000+00:00",
          "number": "6",
          "summary": "Neue Updates von Oracle Linux und Red Hat aufgenommen"
        },
        {
          "date": "2025-12-11T23:00:00.000+00:00",
          "number": "7",
          "summary": "Neue Updates von Red Hat aufgenommen"
        },
        {
          "date": "2025-12-14T23:00:00.000+00:00",
          "number": "8",
          "summary": "Neue Updates von Oracle Linux aufgenommen"
        }
      ],
      "status": "final",
      "version": "8"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Oracle Linux",
            "product": {
              "name": "Oracle Linux",
              "product_id": "T004914",
              "product_identification_helper": {
                "cpe": "cpe:/o:oracle:linux:-"
              }
            }
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=8.0.42",
                "product": {
                  "name": "Oracle MySQL \u003c=8.0.42",
                  "product_id": "1813243"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.0.42",
                "product": {
                  "name": "Oracle MySQL \u003c=8.0.42",
                  "product_id": "1813243-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.4.5",
                "product": {
                  "name": "Oracle MySQL \u003c=8.4.5",
                  "product_id": "1813244"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.4.5",
                "product": {
                  "name": "Oracle MySQL \u003c=8.4.5",
                  "product_id": "1813244-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=9.3.0",
                "product": {
                  "name": "Oracle MySQL \u003c=9.3.0",
                  "product_id": "1813245"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=9.3.0",
                "product": {
                  "name": "Oracle MySQL \u003c=9.3.0",
                  "product_id": "1813245-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.0",
                "product": {
                  "name": "Oracle MySQL \u003c=9.1.0",
                  "product_id": "1813337"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=9.1.0",
                "product": {
                  "name": "Oracle MySQL \u003c=9.1.0",
                  "product_id": "1813337-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.0.40",
                "product": {
                  "name": "Oracle MySQL \u003c=8.0.40",
                  "product_id": "T040476"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.0.40",
                "product": {
                  "name": "Oracle MySQL \u003c=8.0.40",
                  "product_id": "T040476-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.4.3",
                "product": {
                  "name": "Oracle MySQL \u003c=8.4.3",
                  "product_id": "T040477"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.4.3",
                "product": {
                  "name": "Oracle MySQL \u003c=8.4.3",
                  "product_id": "T040477-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.0.43",
                "product": {
                  "name": "Oracle MySQL \u003c=8.0.43",
                  "product_id": "T047927"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.0.43",
                "product": {
                  "name": "Oracle MySQL \u003c=8.0.43",
                  "product_id": "T047927-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.4.6",
                "product": {
                  "name": "Oracle MySQL \u003c=8.4.6",
                  "product_id": "T047928"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=8.4.6",
                "product": {
                  "name": "Oracle MySQL \u003c=8.4.6",
                  "product_id": "T047928-fixed"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=9.4.0",
                "product": {
                  "name": "Oracle MySQL \u003c=9.4.0",
                  "product_id": "T047929"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c=9.4.0",
                "product": {
                  "name": "Oracle MySQL \u003c=9.4.0",
                  "product_id": "T047929-fixed"
                }
              }
            ],
            "category": "product_name",
            "name": "MySQL"
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "RESF Rocky Linux",
            "product": {
              "name": "RESF Rocky Linux",
              "product_id": "T032255",
              "product_identification_helper": {
                "cpe": "cpe:/o:resf:rocky_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "RESF"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux",
            "product": {
              "name": "Red Hat Enterprise Linux",
              "product_id": "67646",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:enterprise_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Ubuntu Linux",
            "product": {
              "name": "Ubuntu Linux",
              "product_id": "T000126",
              "product_identification_helper": {
                "cpe": "cpe:/o:canonical:ubuntu_linux:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Ubuntu"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "v7",
                "product": {
                  "name": "Xerox FreeFlow Print Server v7",
                  "product_id": "T035098",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:xerox:freeflow_print_server:v7"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "FreeFlow Print Server"
          }
        ],
        "category": "vendor",
        "name": "Xerox"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-12133",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-12133"
    },
    {
      "cve": "CVE-2024-35195",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2024-35195"
    },
    {
      "cve": "CVE-2025-4517",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-4517"
    },
    {
      "cve": "CVE-2025-49796",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-53040",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53040"
    },
    {
      "cve": "CVE-2025-53042",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53042"
    },
    {
      "cve": "CVE-2025-53044",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53044"
    },
    {
      "cve": "CVE-2025-53045",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53045"
    },
    {
      "cve": "CVE-2025-53053",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53053"
    },
    {
      "cve": "CVE-2025-53054",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53054"
    },
    {
      "cve": "CVE-2025-53062",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53062"
    },
    {
      "cve": "CVE-2025-53067",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53067"
    },
    {
      "cve": "CVE-2025-53069",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-53069"
    },
    {
      "cve": "CVE-2025-5318",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5399",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-5399"
    },
    {
      "cve": "CVE-2025-6965",
      "product_status": {
        "known_affected": [
          "67646",
          "T000126",
          "T035098",
          "T004914",
          "T032255"
        ],
        "last_affected": [
          "1813245",
          "1813244",
          "1813243",
          "1813337",
          "T047927",
          "T047928",
          "T040477",
          "T047929",
          "T040476"
        ]
      },
      "release_date": "2025-10-21T22:00:00.000+00:00",
      "title": "CVE-2025-6965"
    }
  ]
}

WID-SEC-W-2026-1118

Vulnerability from csaf_certbund - Published: 2026-04-14 22:00 - Updated: 2026-04-19 22:00

Summary

Dell PowerProtect Data Domain OS: Mehrere Schwachstellen

Severity

Hoch

Notes

Produktbeschreibung: Dell PowerProtect Data Domain Operating System (DD OS) ist das Betriebssystem für die PowerProtect Data Domain Appliances von Dell.

Angriff: Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain OS ausnutzen, um beliebigen Code auszuführen – sogar mit Root-Rechten –, um erweiterte Rechte zu erlangen – einschließlich Administratorrechte –, um Sicherheitsmaßnahmen zu umgehen, um Daten zu manipulieren, um vertrauliche Informationen offenzulegen oder um andere, nicht näher spezifizierte Angriffe durchzuführen.

Betroffene Betriebssysteme: - Sonstiges

CVE-2016-9840

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2024-12718

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2024-2236

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2024-47081

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2024-9143

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-0938

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-21993

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-21996

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-22007

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-22018

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-22027

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-22037

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-22038

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-22063

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-23136

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-36568

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37785

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37800

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37801

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37802

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37803

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37805

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-37925

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-4207

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-4516

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-4598

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-46605

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-46606

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-46607

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-46641

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-4877

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-4878

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-48976

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-49794

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-49796

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-5278

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-5318

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-5372

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-6020

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-6021

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-6069

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-6170

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-6965

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2025-7425

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-22761

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23774

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23775

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23776

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23777

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23778

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23779

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-23853

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-24504

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-24505

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-24506

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-26942

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-26943

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-26944

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-26951

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-28263

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-35072

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-35073

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-35074

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-35153

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

CVE-2026-35154

Affected products

Known affected 7 products

Product	Identifier	Version	Remediation
Dell PowerProtect Data Domain OS <7.13.1.60 Dell / PowerProtect Data Domain OS		<7.13.1.60
Dell PowerProtect Data Domain OS <8.6.0.0 Dell / PowerProtect Data Domain OS		<8.6.0.0
Dell PowerProtect Data Domain OS <8.3.1.20 Dell / PowerProtect Data Domain OS		<8.3.1.20
Dell PowerProtect Data Domain OS <8.3.1.30 Dell / PowerProtect Data Domain OS		<8.3.1.30
Dell PowerProtect Data Domain OS <7.13.1.70 Dell / PowerProtect Data Domain OS		<7.13.1.70
Dell PowerProtect Data Domain OS <8.7.0.0 Dell / PowerProtect Data Domain OS		<8.7.0.0
Dell PowerProtect Data Domain OS <8.7.0.1 Dell / PowerProtect Data Domain OS		<8.7.0.1

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.dell.com/support/kbdoc/000450699	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Dell PowerProtect Data Domain Operating System (DD OS) ist das Betriebssystem f\u00fcr die PowerProtect Data Domain Appliances von Dell.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Dell PowerProtect Data Domain OS ausnutzen, um beliebigen Code auszuf\u00fchren \u2013 sogar mit Root-Rechten \u2013, um erweiterte Rechte zu erlangen \u2013 einschlie\u00dflich Administratorrechte \u2013, um Sicherheitsma\u00dfnahmen zu umgehen, um Daten zu manipulieren, um vertrauliche Informationen offenzulegen oder um andere, nicht n\u00e4her spezifizierte Angriffe durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2026-1118 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1118.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2026-1118 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1118"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2026-060 vom 2026-04-14",
        "url": "https://www.dell.com/support/kbdoc/000450699"
      }
    ],
    "source_lang": "en-US",
    "title": "Dell PowerProtect Data Domain OS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2026-04-19T22:00:00.000+00:00",
      "generator": {
        "date": "2026-04-20T06:44:11.556+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2026-1118",
      "initial_release_date": "2026-04-14T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2026-04-14T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2026-04-16T22:00:00.000+00:00",
          "number": "2",
          "summary": "Referenz(en) aufgenommen: EUVD-2026-23378"
        },
        {
          "date": "2026-04-19T22:00:00.000+00:00",
          "number": "3",
          "summary": "Referenz(en) aufgenommen: EUVD-2025-209517, EUVD-2026-23392, EUVD-2026-23396, EUVD-2026-23401, EUVD-2026-23405, EUVD-2026-23406, EUVD-2026-23407, EUVD-2026-23411, EUVD-2026-23413, EUVD-2025-209519, EUVD-2025-209521, EUVD-2025-209523, EUVD-2025-209524"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c8.7.0.0",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c8.7.0.0",
                  "product_id": "T052841"
                }
              },
              {
                "category": "product_version",
                "name": "8.7.0.0",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 8.7.0.0",
                  "product_id": "T052841-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:8.7.0.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.7.0.1",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c8.7.0.1",
                  "product_id": "T052842"
                }
              },
              {
                "category": "product_version",
                "name": "8.7.0.1",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 8.7.0.1",
                  "product_id": "T052842-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:8.7.0.1"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.3.1.30",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c8.3.1.30",
                  "product_id": "T052843"
                }
              },
              {
                "category": "product_version",
                "name": "8.3.1.30",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 8.3.1.30",
                  "product_id": "T052843-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:8.3.1.30"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.13.1.70",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c7.13.1.70",
                  "product_id": "T052844"
                }
              },
              {
                "category": "product_version",
                "name": "7.13.1.70",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 7.13.1.70",
                  "product_id": "T052844-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:7.13.1.70"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.6.0.0",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c8.6.0.0",
                  "product_id": "T052845"
                }
              },
              {
                "category": "product_version",
                "name": "8.6.0.0",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 8.6.0.0",
                  "product_id": "T052845-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:8.6.0.0"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c8.3.1.20",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c8.3.1.20",
                  "product_id": "T052846"
                }
              },
              {
                "category": "product_version",
                "name": "8.3.1.20",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 8.3.1.20",
                  "product_id": "T052846-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:8.3.1.20"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c7.13.1.60",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS \u003c7.13.1.60",
                  "product_id": "T052847"
                }
              },
              {
                "category": "product_version",
                "name": "7.13.1.60",
                "product": {
                  "name": "Dell PowerProtect Data Domain OS 7.13.1.60",
                  "product_id": "T052847-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:dell:powerprotect_data_domain_os:7.13.1.60"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "PowerProtect Data Domain OS"
          }
        ],
        "category": "vendor",
        "name": "Dell"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-9840",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2016-9840"
    },
    {
      "cve": "CVE-2024-12718",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2024-12718"
    },
    {
      "cve": "CVE-2024-2236",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2024-2236"
    },
    {
      "cve": "CVE-2024-47081",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2024-47081"
    },
    {
      "cve": "CVE-2024-9143",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2024-9143"
    },
    {
      "cve": "CVE-2025-0938",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-0938"
    },
    {
      "cve": "CVE-2025-21993",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-21993"
    },
    {
      "cve": "CVE-2025-21996",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-21996"
    },
    {
      "cve": "CVE-2025-22007",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-22007"
    },
    {
      "cve": "CVE-2025-22018",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-22018"
    },
    {
      "cve": "CVE-2025-22027",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-22027"
    },
    {
      "cve": "CVE-2025-22037",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-22037"
    },
    {
      "cve": "CVE-2025-22038",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-22038"
    },
    {
      "cve": "CVE-2025-22063",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-22063"
    },
    {
      "cve": "CVE-2025-23136",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-23136"
    },
    {
      "cve": "CVE-2025-36568",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-36568"
    },
    {
      "cve": "CVE-2025-37785",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37785"
    },
    {
      "cve": "CVE-2025-37800",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37800"
    },
    {
      "cve": "CVE-2025-37801",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37801"
    },
    {
      "cve": "CVE-2025-37802",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37802"
    },
    {
      "cve": "CVE-2025-37803",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37803"
    },
    {
      "cve": "CVE-2025-37805",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37805"
    },
    {
      "cve": "CVE-2025-37925",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-37925"
    },
    {
      "cve": "CVE-2025-4207",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-4207"
    },
    {
      "cve": "CVE-2025-4516",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-4516"
    },
    {
      "cve": "CVE-2025-4598",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-4598"
    },
    {
      "cve": "CVE-2025-46605",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-46605"
    },
    {
      "cve": "CVE-2025-46606",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-46606"
    },
    {
      "cve": "CVE-2025-46607",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-46607"
    },
    {
      "cve": "CVE-2025-46641",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-46641"
    },
    {
      "cve": "CVE-2025-4877",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-4877"
    },
    {
      "cve": "CVE-2025-4878",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-4878"
    },
    {
      "cve": "CVE-2025-48976",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-48976"
    },
    {
      "cve": "CVE-2025-49794",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-49794"
    },
    {
      "cve": "CVE-2025-49796",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-49796"
    },
    {
      "cve": "CVE-2025-5278",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-5278"
    },
    {
      "cve": "CVE-2025-5318",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-5318"
    },
    {
      "cve": "CVE-2025-5372",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-5372"
    },
    {
      "cve": "CVE-2025-6020",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-6020"
    },
    {
      "cve": "CVE-2025-6021",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-6021"
    },
    {
      "cve": "CVE-2025-6069",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-6069"
    },
    {
      "cve": "CVE-2025-6170",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-6170"
    },
    {
      "cve": "CVE-2025-6965",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-6965"
    },
    {
      "cve": "CVE-2025-7425",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2025-7425"
    },
    {
      "cve": "CVE-2026-22761",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-22761"
    },
    {
      "cve": "CVE-2026-23774",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23774"
    },
    {
      "cve": "CVE-2026-23775",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23775"
    },
    {
      "cve": "CVE-2026-23776",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23776"
    },
    {
      "cve": "CVE-2026-23777",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23777"
    },
    {
      "cve": "CVE-2026-23778",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23778"
    },
    {
      "cve": "CVE-2026-23779",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23779"
    },
    {
      "cve": "CVE-2026-23853",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-23853"
    },
    {
      "cve": "CVE-2026-24504",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-24504"
    },
    {
      "cve": "CVE-2026-24505",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-24505"
    },
    {
      "cve": "CVE-2026-24506",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-24506"
    },
    {
      "cve": "CVE-2026-26942",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-26942"
    },
    {
      "cve": "CVE-2026-26943",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-26943"
    },
    {
      "cve": "CVE-2026-26944",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-26944"
    },
    {
      "cve": "CVE-2026-26951",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-26951"
    },
    {
      "cve": "CVE-2026-28263",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-28263"
    },
    {
      "cve": "CVE-2026-35072",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-35072"
    },
    {
      "cve": "CVE-2026-35073",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-35073"
    },
    {
      "cve": "CVE-2026-35074",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-35074"
    },
    {
      "cve": "CVE-2026-35153",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-35153"
    },
    {
      "cve": "CVE-2026-35154",
      "product_status": {
        "known_affected": [
          "T052847",
          "T052845",
          "T052846",
          "T052843",
          "T052844",
          "T052841",
          "T052842"
        ]
      },
      "release_date": "2026-04-14T22:00:00.000+00:00",
      "title": "CVE-2026-35154"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-5318 (GCVE-0-2025-5318)

Tags

Sightings

Nomenclature