Skip to main content
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Send crafted XML to exposed endpoint
  2. Delivery
    Trigger xmlBuildQName with overflow payload
  3. Exploit
    Integer overflow in buffer size calculation
  4. Execution
    Stack buffer overflow
  5. Persist
    Memory corruption
  6. Impact
    Application crash (DoS)

Vulnerability Assessment

Weakness
CWE
CWE-190
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Integer overflow checks
MITRE ATT&CK

1 technique across 1 tactic: Execution

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

No special conditions required-remote unauthenticated exploitation against default configurations of any application using vulnerable libxml2 versions to parse untrusted XML input. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network accessibility without authentication, low attack complexity, and no user interaction. Exploitation requires only the ability to submit XML content to an application endpoint that invokes libxml2's xmlBuildQName function during parsing. Common exposure vectors include web APIs accepting XML payloads, SOAP services, RSS/Atom feed parsers, configuration file processors, and document management systems. What LIMITS exploitation: applications that do not process XML from untrusted sources, systems where XML endpoints require authentication (reduces attack surface but does not prevent authenticated attacker exploitation), or environments using alternative XML parsers.
Impact

Real-world risk is moderate despite the 7.5 CVSS score. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms remote unauthenticated exploitation with low complexity, but impact is strictly availability (denial of service) with no confidentiality or integrity compromise. The EPSS score of 0.75% at the 73rd percentile suggests below-average exploitation probability in the wild-most vulnerabilities have lower EPSS, but three-quarters of CVEs pose less real-world risk. Publicly available exploit code elevates immediate risk for internet-facing XML processing endpoints. No CISA KEV listing indicates no confirmed widespread exploitation campaigns. SSVC framework assessment: exploitation is POC-level (not active), automatable (network vector, no user interaction), technical impact limited to availability disruption. Priority depends heavily on asset criticality-high for internet-facing APIs consuming untrusted XML, lower for internal enterprise systems with authenticated access controls. The description indicates memory corruption potential beyond simple crashes, though CVSS impact ratings suggest DoS as the confirmed reliable outcome.
Exploit ScenarioDerived

An attacker sends a specially crafted XML document with malformed namespace declarations to a web service using libxml2 for parsing. The xmlBuildQName function performs integer overflow during buffer size calculation for the qualified name, allocating insufficient stack space. When the function writes the full QName data, it overflows the stack buffer, corrupting adjacent memory structures and crashing the service process, denying service to legitimate users.
Act Now Prioritize within 24-48h. Why: Active threat signals + CRITICAL/HIGH severity.
Patch available 0.8% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Apr 19, 2026

Stack-based buffer overflow in libxml2's xmlBuildQName function allows remote unauthenticated attackers to crash affected systems via crafted XML input. The vulnerability affects libxml2 directly and downstream Red Hat products including OpenShift Container Platform 4.12-4.19, RHEL 7-10, and JBoss Core Services. With CVSS 7.5 (AV:N/AC:L/PR:N/UI:N), EPSS 0.75% (73rd percentile), and publicly available exploit code, this represents a moderate real-world risk focused on availability disruption rather than code execution or data compromise.

Earlier versions of this analysis (1)
v1 Mar 14, 2026 - 21:20 CVSS 7.5

CVE-2025-6021 is an integer overflow vulnerability in libxml2's xmlBuildQName function that can trigger a stack-based buffer overflow when processing specially crafted XML input. This affects all libxml2 users and downstream applications (web servers, parsers, document processors) that process untrusted XML content; attackers can cause denial of service through memory corruption. The vulnerability is remotely exploitable with no authentication required, though current KEV/active exploitation status is unknown without extended intelligence sources.

RemediationAI

Apply vendor-released patches immediately for internet-facing systems processing untrusted XML. For Red Hat Enterprise Linux, upgrade libxml2 to fixed versions: RHEL 7 to 0:2.9.1-6.el7_9.10, RHEL 8 to 0:2.9.7-21.el8_10.1 (or version-specific patches per support tier), RHEL 9 to 0:2.9.13-10.el9_6, RHEL 10 to 0:2.12.5-7.el10_0. OpenShift Container Platform administrators should apply platform-specific updates via Red Hat Security Advisories RHSA-2025:12237 through RHSA-2025:13325 matching their cluster version. Ubuntu users should install updates from USN-7694-1, Debian users from DLA-4251-1. If patching cannot be completed immediately, implement compensating controls: restrict XML processing endpoints to authenticated users only (reduces attack surface from AV:N to trusted networks), deploy XML input validation and size limits before libxml2 parsing (blocks oversized crafted inputs but adds processing overhead and may break legitimate large documents), enable application-level request throttling to limit DoS impact (does not prevent exploitation but contains blast radius), and monitor for abnormal process crashes in XML-consuming services. Note that input validation is bypass-prone against novel integer overflow vectors and should be considered temporary mitigation only.

Affected VersionsENISA

Red Hat OpenShift Container Platform 4.18 patch: 418.94.202508060022-0
Red Hat Enterprise Linux 8.6 Telecommunications Update Service patch: 0:2.9.7-13.el8_6.10
Red Hat OpenShift Container Platform 4.13 patch: 413.92.202509030117-0
Red Hat Enterprise Linux 8 patch: 0:2.9.7-21.el8_10.1
Red Hat Enterprise Linux 9 patch: 0:2.9.13-10.el9_6
Red Hat OpenShift Container Platform 4.19 patch: 4.19.9.6.202507230107-0
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions patch: 0:2.9.7-13.el8_6.10
Red Hat Enterprise Linux 8.2 Advanced Update Support patch: 0:2.9.7-9.el8_2.3
Red Hat Discovery 2 patch: sha256:ad07f55ee75fb20310c88f154a04665bd8465d138d66c665c300f61447858344
Red Hat Enterprise Linux 9.4 Extended Update Support patch: 0:2.9.13-10.el9_4
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions patch: 0:2.9.13-1.el9_0.5
Red Hat OpenShift Container Platform 4.12 patch: 412.86.202509030110-0
Red Hat Enterprise Linux 8.8 Telecommunications Update Service patch: 0:2.9.7-16.el8_8.9
Red Hat OpenShift Container Platform 4.14 patch: 414.92.202508041909-0
Red Hat Insights proxy 1.5 patch: sha256:c26d589f12647890b67aaa986f54d3f7c6f7f2563fb5a73f38d559e6138739d7
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions patch: 0:2.9.7-16.el8_8.9
Red Hat Enterprise Linux 7 Extended Lifecycle Support patch: 0:2.9.1-6.el7_9.10
Red Hat OpenShift Container Platform 4.17 patch: 417.94.202508141510-0
Red Hat Insights proxy 1.5 patch: sha256:e54a5a5f9d69dd6a03e2bcd845e2202910a188d266d4a79b12c387ceffc36f2d
Red Hat OpenShift Container Platform 4.16 patch: 416.94.202508050040-0
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support patch: 0:2.9.7-9.el8_4.6
Red Hat Enterprise Linux 10 patch: 0:2.12.5-7.el10_0
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions patch: 0:2.9.13-3.el9_2.7
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On patch: 0:2.9.7-9.el8_4.6
Red Hat Discovery 2 patch: sha256:c517869dacaf4d3650310d4a52e83706e0b311d6ebb4a9b37b1c7acff5c142ec
Red Hat OpenShift Container Platform 4.15 patch: 415.92.202508192014-0
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support patch: 0:2.9.7-13.el8_6.10

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

Libxml2 is a widely-deployed XML parsing library used across Linux distributions and enterprise platforms. The xmlBuildQName function performs qualified name construction during XML processing, combining namespace prefixes and local names into QNames. CWE-190 (integer overflow) occurs when buffer size calculations overflow, causing the function to allocate insufficient stack space. Subsequent operations write beyond the allocated buffer, corrupting stack memory. The vulnerability affects the core libxml2 library (cpe:2.3:a:xmlsoft:libxml2) and propagates to all downstream consumers including Red Hat Enterprise Linux 7/8/9/10, OpenShift Container Platform across multiple major versions (4.12-4.18), and specialized variants like Telecommunications Update Service and Extended Lifecycle Support editions. Ubuntu and Debian have also confirmed impact across multiple releases.

Know when Libxml2 gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (redhat) PRIMARY 7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu MEDIUM
SUSE HIGH
Red Hat 7.5 MEDIUM

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
PoC Detected
Mar 24, 2026 - 12:16 vuln.today
Public exploit code
CVE Published
Jun 12, 2025 - 13:15 nvd
HIGH 7.5

DescriptionCVE.org

A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.

Executive ViewAI

Why It Matters

A stack-based buffer overflow in libxml2's XML parsing function (CVE-2025-6021) can remotely crash Red Hat infrastructure including OpenShift, RHEL, and JBoss systems without authentication. Organizations running affected Red Hat products face immediate availability risk from denial-of-service attacks via malicious XML payloads, requiring urgent patching across all vulnerable systems.

Business Impact: High
Compensating Controls

Apply vendor patch. Interim mitigations if patching delayed: implement network-level XML traffic filtering, restrict XML processing to trusted sources only, and configure systems to disable external XML entity processing (XXE mitigation) and enforce strict XML schema validation.

Threat Intelligence Overview

Threat Score
5.0/10
Composite threat intelligence
EPSS Score
0.8%
Top 27% exploitable
Threat Intel
1
1 source
Exploit
POC
Public exploit code exists
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS CISA Vendor

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC Yes
EPSS 0.8%
Patch available Yes
Active threat Yes
Deciding rule
Active threat signals + CRITICAL/HIGH severity
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Out-of-Cycle
Exploitation· derived
Poc
System Exposure· derived
Open
Automatable· derived
Yes
Human Impact
High

Priority Score

69
Low Medium High Critical
KEV: 0
EPSS: +1
CVSS: +38
PoC: +20
Weaponized: 0
Threat intel: +10
Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Integer Overflow MEDIUM

Integer overflow occurs when an arithmetic operation produces a result that exceeds the maximum value a given integer type can store.

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

More in Libxml2

View all
CVE-2016-4658 CRITICAL
9.8 Sep 25

xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS befor
CVE-2016-1762 HIGH POC
8.1 Mar 24

The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer
CVE-2016-1834 HIGH POC
7.8 May 20

Heap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X b
CVE-2016-1840 HIGH POC
7.8 May 20

Heap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as used in Apple iOS before 9
CVE-2024-34459 HIGH POC
7.5

Alpine Linux: libxml2 fixed in 2.12.7-r0
CVE-2022-40303 HIGH
7.5 Nov 23

An issue was discovered in libxml2 before 2.10.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploit
CVE-2017-9047 HIGH POC
7.5 May 18

A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. Rated high severity (CVSS 7.5), this vulnerabil
CVE-2016-4447 HIGH POC
7.5 Jun 09

The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denia
CVE-2017-16932 HIGH
7.5 Nov 23

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities. Rated high severity (CVSS 7.
CVE-2016-4483 HIGH POC
7.5 Apr 11

The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial

CVE-2013-1969 HIGH POC
7.5 Apr 25

Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attac
CVE-2016-1839 MEDIUM POC
5.5 May 20

The xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS befo

Same weakness CWE-190 – Integer Overflow or Wraparound

View all
CVE-2013-2729 CRITICAL POC
9.8
CVE-2015-8651 HIGH
8.8
CVE-2012-5054 HIGH POC
8.8
CVE-2014-0569 CRITICAL POC
9.3
CVE-2023-21716 CRITICAL POC
9.8
CVE-2017-3599 HIGH POC
7.5
CVE-2017-7529 HIGH
7.5
CVE-2016-1010 HIGH
8.8

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

Ubuntu

Priority: Medium
libxml2
Release Status Version
bionic released 2.9.4+dfsg1-6.1ubuntu1.9+esm4
focal released 2.9.10+dfsg-5ubuntu0.20.04.10+esm1
jammy released 2.9.13+dfsg-1ubuntu0.8
noble released 2.9.14+dfsg-1.3ubuntu3.4
plucky released 2.12.7+dfsg+really2.9.14-0.4ubuntu0.2
trusty released 2.9.1+dfsg1-3ubuntu4.13+esm8
upstream released -
xenial released 2.9.3+dfsg1-1ubuntu0.7+esm9
oracular ignored end of life, was needs-triage
USN-7694-1

Debian

Bug #1107720
libxml2
Release Status Fixed Version Urgency
bullseye fixed 2.9.10+dfsg-6.7+deb11u8 -
bullseye (security) fixed 2.9.10+dfsg-6.7+deb11u9 -
bookworm fixed 2.9.14+dfsg-1.3~deb12u3 -
bookworm (security) fixed 2.9.14+dfsg-1.3~deb12u4 -
trixie fixed 2.12.7+dfsg+really2.9.14-2.1+deb13u2 -
trixie (security) fixed 2.12.7+dfsg+really2.9.14-2.1+deb13u1 -
forky, sid fixed 2.15.1+dfsg-2 -
(unstable) fixed 2.12.7+dfsg+really2.9.14-2 -
DLA-4251-1

SUSE

Severity: High
Product Status
Container bci/kiwi:9.24.43-16.25 Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE Affected
Container bci/spack:0.23.1-11.20 Container containers/lmcache-vllm-openai:0.3.2-1.2 Container containers/open-webui:0.6.9-10.36 Container containers/pytorch:2.7.0-nvidia-2.33 Container containers/vllm-openai:0.9.1-1.2 Container private-registry/harbor-db:2.12.2-2.16 Container private-registry/harbor-nginx:1.21.5-2.15 Container suse/manager/5.0/x86_64/proxy-salt-broker:5.0.5.1.7.28.2 Container suse/manager/5.0/x86_64/proxy-squid:5.0.5.1.7.26.1 Container suse/manager/5.0/x86_64/server-migration-14-16:5.0.5.1.7.26.2 Container suse/mariadb:10.11.11-68.18 Container suse/sle-micro/5.5/toolbox:14.2-3.12.59 Container suse/sle-micro/5.5:2.0.4-5.5.329 Container suse/sle-micro/base-5.5:2.0.4-5.8.185 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.354 Container suse/sle-micro/rt-5.5:2.0.4-4.5.430 Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image ai_15_6 Affected
Container private-registry/harbor-portal:1.1.0-1.1 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.5.1 Container suse/multi-linux-manager/5.1/x86_64/proxy-httpd:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:5.1.0.7.32 Container suse/multi-linux-manager/5.1/x86_64/proxy-squid:5.1.0.6.21 Container suse/multi-linux-manager/5.1/x86_64/server-migration-14-16:5.1.0.6.27 Container suse/multi-linux-manager/5.1/x86_64/server-postgresql:5.1.2.6.13.1 Container suse/multi-linux-manager/5.1/x86_64/server-saline:5.1.2.9.13.1 Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Basic Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-HPC-BYOS-GCE Image SLES15-SP7-Hardened-BYOS-Azure Image SLES15-SP7-Hardened-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-GCE Image proxy-httpd-image Image proxy-salt-broker-image Image proxy-squid-image Image server-database-migration-image Image server-image Image server-migration-14-16-image Image server-postgresql-image Image server-saline-image Affected
Container suse/ltss/sle12.5/sles12sp5:8.5.107 Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Affected
Container suse/manager/4.3/proxy-httpd:4.3.15.9.63.43 Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Affected

Threat IntelligenceMISP

CISA Advisories
ICSA-26-134-10
Sources: CISA (public domain)

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-6021 ADVISORY https://security-tracker.debian.org/tracker/dla-4251-1 ADVISORY https://ubuntu.com/security/notices/USN-7694-1 ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02260/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02275/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02294/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02314/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:02355/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20564/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2025:20607/ REF https://access.redhat.com/errata/RHSA-2025:10630 REF https://access.redhat.com/errata/RHSA-2025:10698 REF https://access.redhat.com/errata/RHSA-2025:10699 REF https://access.redhat.com/errata/RHSA-2025:11580 REF https://access.redhat.com/errata/RHSA-2025:11673 REF https://access.redhat.com/errata/RHSA-2025:12098 REF https://access.redhat.com/errata/RHSA-2025:12099 REF https://access.redhat.com/errata/RHSA-2025:12199 REF https://access.redhat.com/errata/RHSA-2025:12237 REF https://access.redhat.com/errata/RHSA-2025:12239 REF https://access.redhat.com/errata/RHSA-2025:12240 REF https://access.redhat.com/errata/RHSA-2025:12241 REF https://access.redhat.com/errata/RHSA-2025:13267 REF https://access.redhat.com/errata/RHSA-2025:13289 REF https://access.redhat.com/errata/RHSA-2025:13325 REF https://access.redhat.com/errata/RHSA-2025:13335 REF https://access.redhat.com/errata/RHSA-2025:13336 REF https://access.redhat.com/errata/RHSA-2025:14059 REF https://access.redhat.com/errata/RHSA-2025:14396 REF https://access.redhat.com/errata/RHSA-2025:15308 REF https://access.redhat.com/errata/RHSA-2025:15672 REF https://access.redhat.com/errata/RHSA-2025:19020 REF https://access.redhat.com/errata/RHSA-2026:7519 REF https://access.redhat.com/security/cve/CVE-2025-6021 REF https://bugzilla.redhat.com/show_bug.cgi?id=2372406 REF https://cert-portal.siemens.com/productcert/html/ssa-032379.html REF https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy