Home

CVE-2025-2175

Description

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

Risk Information

Base Score
4.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS Score
Exploitation Probability
0.456

Associated Vulnerability

VulnerabilityOS Platform
SUSE-SU-2025:0979-1(Desktop Applications Module 15-SP6) zvbi-debugsource-0.2.35-150000.4.3.1.x86_64.rpmLinux
SUSE-SU-2025:0979-1(Desktop Applications Module 15-SP6) zvbi-debuginfo-0.2.35-150000.4.3.1.x86_64.rpmLinux
SUSE-SU-2025:0979-1(Desktop Applications Module 15-SP6) libzvbi0-debuginfo-0.2.35-150000.4.3.1.x86_64.rpmLinux
SUSE-SU-2025:0979-1(Desktop Applications Module 15-SP6) libzvbi0-0.2.35-150000.4.3.1.x86_64.rpmLinux
Vertical Blanking Interval (VBI) utilities (USN-7367-1) libzvbi0t64_0.2.42-2ubuntu0.24.10.2_amd64.debLinux
Vertical Blanking Interval (VBI) utilities (USN-7367-1) libzvbi0t64_0.2.42-2ubuntu0.24.10.2_i386.debLinux
Vertical Blanking Interval (VBI) utilities (USN-7367-1) zvbi_0.2.42-2ubuntu0.24.10.2_amd64.debLinux
Vertical Blanking Interval (VBI) utilities (USN-7367-1) zvbi_0.2.42-2ubuntu0.24.10.2_i386.debLinux
kernel6.12 Security Update (ALAS-2025-948) kernel6.12-modules-extra-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel6.12-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-tools-devel-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-tools-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-modules-extra-common-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) python3-perf6.12-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-livepatch-6.12.23-29.97-1.0-0.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) bpftool-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-devel-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-headers-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-libbpf-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-libbpf-devel-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) kernel-libbpf-static-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel6.12 Security Update (ALAS-2025-948) perf6.12-6.12.23-29.97.amzn2023.x86_64.rpmLinux
kernel Security Update (ALAS-2025-947) python3-perf-6.1.134-150.224.amzn2023.x86_64.rpmLinux
kernel Security Update (ALAS-2025-947) perf-6.1.134-150.224.amzn2023.x86_64.rpmLinux
kernel Security Update (ALAS-2025-947) kernel-6.1.134-150.224.amzn2023.x86_64.rpmLinux
kernel Security Update (ALAS-2025-947) kernel-modules-extra-6.1.134-150.224.amzn2023.x86_64.rpmLinux
kernel Security Update (ALAS-2025-947) kernel-livepatch-6.1.134-150.224-1.0-0.amzn2023.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234