What is the CVSS score of EUVD-2025-20097?

EUVD-2025-20097 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by EUVD-2025-20097?

Organizations using Alinto SOPE SOGo 2.0.2 face notable risk from CVE-2025-53603, a null pointer dereference vulnerability rated CVSS 7.5.. A patch is available.

How to fix or mitigate EUVD-2025-20097?

Within 7 days: Identify all affected systems running Alinto SOPE SOGo 2.0.2 and apply vendor patches promptly. Monitor vendor channels for patch availability.

Ubuntu EUVD-2025-20097

| CVE-2025-53603 HIGH

NULL Pointer Dereference (CWE-476)

2025-07-05 cve@mitre.org

Null Pointer Dereference Denial Of Service Ubuntu Debian

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 16, 2026 - 03:19 euvd

EUVD-2025-20097

Analysis Generated

Mar 16, 2026 - 03:19 vuln.today

CVE Published

Jul 05, 2025 - 01:15 nvd

HIGH 7.5

DescriptionCVE.org

In Alinto SOPE SOGo 2.0.2 through 5.12.2, sope-core/NGExtensions/NGHashMap.m allows a NULL pointer dereference and SOGo crash via a request in which a parameter in the query string is a duplicate of a parameter in the POST body.

Analysis

Technical ContextAI

A NULL pointer dereference occurs when the application attempts to use a pointer that has not been initialized or has been set to NULL.

RemediationAI

Add NULL checks before pointer dereference operations. Use static analysis to identify potential NULL pointer issues. Enable compiler warnings.

Same weakness CWE-476 – NULL Pointer Dereference

View all

CVE-2016-0742 HIGH

7.5

CVE-2014-3470 MEDIUM

4.3

CVE-2017-3730 HIGH POC

7.5

CVE-2017-3169 CRITICAL POC

9.8

CVE-2016-4957 HIGH

7.5

CVE-2015-3194 HIGH

7.5

CVE-2026-21525 MEDIUM

6.2

CVE-2017-0016 MEDIUM

5.9

Same technique Null Pointer Dereference

View all

CVE-2016-0742 HIGH

7.5

CVE-2014-3470 MEDIUM

4.3

CVE-2017-3730 HIGH POC

7.5

CVE-2017-3169 CRITICAL POC

9.8

CVE-2016-4957 HIGH

7.5

CVE-2015-3194 HIGH

7.5

CVE-2026-21525 MEDIUM

6.2

CVE-2017-0016 MEDIUM

5.9

Vendor StatusVendor

Ubuntu

Priority: Medium

sogo

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	DNE	-
upstream	needs-triage	-
oracular	ignored	end of life, was needs-triage
plucky	ignored	end of life, was needs-triage
questing	needs-triage	-

Debian

Bug #1108798

sope

Release	Status	Fixed Version	Urgency
bullseye	fixed	5.0.1-2+deb11u1	-
bullseye (security)	fixed	5.0.1-2+deb11u1	-
bookworm, bookworm (security)	fixed	5.8.0-1+deb12u1	-
trixie	fixed	5.12.1-2	-
forky, sid	fixed	5.12.4-1	-
bookworm	fixed	5.8.0-1+deb12u1	-
(unstable)	fixed	5.12.1-2	-

DLA-4260-1 DSA-5970-1

EUVD-2025-20097 vulnerability details – vuln.today

Back

Ubuntu EUVD-2025-20097

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-476 – NULL Pointer Dereference

Same technique Null Pointer Dereference

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code