Which versions of plan9port are affected by CVE-2025-7209?

CVE-2025-7209 is a low-severity vulnerability in 9fans plan9port (CVSS 3.3). The limited severity suggests constrained impact, typically requiring specific conditions or local access for…. A patch is available.

Is there a public PoC exploit available for CVE-2025-7209?

Yes, a public proof-of-concept exploit is available for CVE-2025-7209. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-7209?

During next maintenance window: Apply vendor patches when convenient. Vendor patch is available.

plan9port CVE-2025-7209

Q: What is the CVSS score of CVE-2025-7209?

CVE-2025-7209 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2025-20761 LOW

Improper Resource Shutdown or Release (CWE-404)

2025-07-09 cna@vuldb.com

Denial Of Service Plan9port

1.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

3.3 LOW

Local attack with low privileges, no interaction, low availability impact only.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

CVSS changed

Apr 29, 2026 - 01:11 NVD

3.3 (LOW) 1.9 (LOW)

EUVD ID Assigned

Mar 16, 2026 - 06:20 euvd

EUVD-2025-20761

Analysis Generated

Mar 16, 2026 - 06:20 vuln.today

Patch released

Mar 16, 2026 - 06:20 nvd

Patch available

PoC Detected

Feb 02, 2026 - 15:32 vuln.today

Public exploit code

CVE Published

Jul 09, 2025 - 01:15 cve.org

LOW 1.9

CVE Published

Jul 09, 2025 - 01:15 nvd

LOW 3.3

DescriptionCVE.org

A vulnerability has been found in 9fans plan9port up to 9da5b44 and classified as problematic. Affected by this vulnerability is the function value_decode in the library src/libsec/port/x509.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is deae8939583d83fd798fca97665e0e94656c3ee8. It is recommended to apply a patch to fix this issue.

AnalysisAI

Local denial of service in 9fans plan9port via a null pointer dereference in the X.509 certificate parsing function value_decode. A local attacker with low privileges can crash applications using the libsec port, disrupting availability. Public exploit code is available, but EPSS indicates low exploitation likelihood and no active exploitation has been reported via CISA KEV.

Technical ContextAI

The vulnerability resides in the plan9port library, a port of Plan 9 from Bell Labs to Unix-like systems, specifically in the X.509 certificate parsing code at src/libsec/port/x509.c. The function value_decode misuses resources, leading to a null pointer dereference (CWE-404) when processing malformed input. The affected product is 9fans plan9port (cpe:2.3:a:9fans:plan9port:*), a rolling-release distribution where version boundaries are defined by commit hashes rather than traditional version numbers.

RemediationAI

Apply the patch commit deae8939583d83fd798fca97665e0e94656c3ee8 from the 9front repository to the plan9port source tree. Since the project uses rolling releases, updating to the latest source code will include the fix. No new versioned release is available. As a workaround, restrict local access to processes using the libsec library if certificate parsing from untrusted local inputs is a concern, though this may not fully mitigate the risk.