CVE 2025 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

4,053 documents · Identifier year 2025 · 13 / 82

601. CVE-2025-61984openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand→
602. CVE-2025-61971microcode_ctl: Microcode: Loss of SEV-SNP guest integrity via NBIO register modification→
603. CVE-2025-61962fetchmail: Fetchmail denial of service→
604. CVE-2025-61921sinatra: Sinatra has ReDoS vulnerability in ETag header value generation→
605. CVE-2025-61919rubygem-rack: Unbounded read in `Rack::Request` form parsing can lead to memory exhaustion→
606. CVE-2025-61915CUPS: Local denial-of-service via cupsd.conf update and related issues→
607. CVE-2025-61912python-ldap: python-ldap Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination→
608. CVE-2025-61911python-ldap: sanitization bypass in ldap.filter.escape_filter_chars→
609. CVE-2025-61795tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service→
610. CVE-2025-61780rubygem-rack: Improper handling of headers in `Rack::Sendfile` may allow proxy bypass→
611. CVE-2025-61779trustee: Trustee's attestation-policy endpoint missing autentication→
612. CVE-2025-61772rack: Rack memory exhaustion denial of service→
613. CVE-2025-61771rack: Rack's multipart parser buffers large non‑file fields entirely in memory, enabling DoS (memory exhaustion)→
614. CVE-2025-61770rack: Rack's unbounded multipart preamble buffering enables DoS (memory exhaustion)→
615. CVE-2025-61748openjdk: Enhance String handling (Oracle CPU 2025-10)→
616. CVE-2025-61732cmd/cgo: Go cgo: Code smuggling due to comment parsing discrepancy→
617. CVE-2025-61731cmd/go: cmd/go: Arbitrary file write via malicious pkg-config directive→
618. CVE-2025-61730crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls→
619. CVE-2025-61729crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate→
620. CVE-2025-61728golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip→
621. CVE-2025-61727golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs→
622. CVE-2025-61726golang: net/url: Memory exhaustion in query parameter parsing in net/url→
623. CVE-2025-61725net/mail: Excessive CPU consumption in ParseAddress in net/mail→
624. CVE-2025-61724net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto→
625. CVE-2025-61723encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem→
626. CVE-2025-61686react-router: React Router has Path Traversal in File Session Storage→
627. CVE-2025-61664grub2: Missing unregister call for normal_exit command may lead to use-after-free→
628. CVE-2025-61663grub2: Missing unregister call for normal commands may lead to use-after-free→
629. CVE-2025-61662grub2: Missing unregister call for gettext command may lead to use-after-free→
630. CVE-2025-61661grub2: grub2: Out-of-bounds write via malicious USB device→
631. CVE-2025-61594uri: URI module: Credential exposure via URI + operator→
632. CVE-2025-61145libtiff: libtiff: Denial of service via double free in tiffcrop.c→
633. CVE-2025-61144libtiff: libtiff: Denial of Service via buffer overflow→
634. CVE-2025-61143libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c→
635. CVE-2025-61107frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c→
636. CVE-2025-61106frr: NULL pointer dereference in show_vty_ext_pref_pref_sid() in ospf_ext.c→
637. CVE-2025-61105FRRouting: frr: NULL Pointer Dereference in FRRouting→
638. CVE-2025-61104frr: NULL pointer dereference in show_vty_unknown_tlv() in ospf_ext.c→
639. CVE-2025-61103frr: NULL pointer dereference in show_vty_ext_link_lan_adj_sid() in ospf_ext.c→
640. CVE-2025-61102FRRouting: frr: NULL Pointer Dereference in FRRouting→
641. CVE-2025-61101FRRouting: frr: NULL Pointer Dereference in FRRouting→
642. CVE-2025-61100frr: FRRouting: NULL Pointer Dereference in FRRouting→
643. CVE-2025-61099FRRouting: frr: NULL Pointer Dereference in FRRouting→
644. CVE-2025-61029virtuoso-opensource: Virtuoso-opensource: Denial of Service via crafted SQL statements→
645. CVE-2025-61028virtuoso-opensource: Virtuoso-opensource: Denial of Service via crafted SQL statements→
646. CVE-2025-61027virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements→
647. CVE-2025-61025virtuoso-opensource: virtuoso-opensource: Denial of Service via crafted SQL statements→
648. CVE-2025-61024virtuoso-opensource: virtuoso-opensource: Denial of Service via crafted SQL statements in sqlo_try_in_loop→
649. CVE-2025-61023virtuoso-opensource: Virtuoso-opensource: Denial of Service in st_compare component via crafted SQL statements→
650. CVE-2025-61022virtuoso-opensource: openlink virtuoso-opensource: Denial of Service via crafted SQL statements→