Düşük CVSS 2.5

CVE-2025-6170: Jboss Core Services: yığıt (stack) taşması

Yayın: 16 Haziran 2025 19:15 · Güncelleme: 6 Kasım 2026 21:45

Açıklama (NVD)

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

Özet bilgiler

Ürün: Redhat Jboss Core Services
CVSS v3.1: 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS: %0,32 (yüzdelik 25)
CWE: CWE-121
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
redhat-jboss-core-services	—	—	—
redhat-openshift-container-platform	4.0	4.0	—
redhat-enterprise-linux	6.0	6.0	—
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux	10.0	10.0	—
xmlsoft-libxml2	—	—	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları