2 lines
6.2 KiB
JSON
2 lines
6.2 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"glibc","vendor":"The GNU C Library","versions":[{"lessThanOrEqual":"2.40","status":"affected","version":"2.13","versionType":"custom"}]}],"source":"3ff69d7a-14f2-4f67-a097-88dee7810d18"},{"affectedData":[{"defaultStatus":"unknown","product":"RUGGEDCOM ROX MX5000","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX MX5000RE","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1400","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1500","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1501","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1510","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1511","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1512","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1524","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX1536","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"RUGGEDCOM ROX RX5000","vendor":"Siemens","versions":[{"lessThan":"V2.17.1","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"cveTags":[],"descriptions":[{"lang":"en","value":"When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size."},{"lang":"es","value":"Cuando la función assert() en las versiones GNU C Library 2.13 a 2.40 falla, no asigna suficiente espacio para la cadena de mensaje de error de aserción y la información de tamaño, lo que puede provocar un desbordamiento de búfer si el tamaño de la cadena del mensaje se alinea con el tamaño de la página."}],"id":"CVE-2025-0395","lastModified":"2026-06-17T08:26:23.440","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-0395","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-02-04T20:45:32.215090Z","version":"2.0.3"}}]},"published":"2025-01-22T13:15:20.933","references":[{"source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=32582"},{"source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","url":"https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001"},{"source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","url":"https://sourceware.org/pipermail/libc-announce/2025/000044.html"},{"source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","url":"https://www.openwall.com/lists/oss-security/2025/01/22/4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/01/22/4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/01/23/2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/04/13/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2025/04/24/7"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2025/04/msg00039.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20250228-0006/"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html"}],"sourceIdentifier":"3ff69d7a-14f2-4f67-a097-88dee7810d18","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-131"}],"source":"3ff69d7a-14f2-4f67-a097-88dee7810d18","type":"Secondary"}]}
|