PT-2025-28827 · 9Fans · Plan9Port

Yifan Zhang · Publicado 2025-07-09 · Atualizado 2026-02-02 · CVE-2025-7208

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: plan9port versions prior to 9da5b44

Description: A critical vulnerability exists in the edump function within the /src/plan9port/src/libsec/port/x509.c library. Manipulation of this function leads to a heap-based buffer overflow. The exploit for this issue has been publicly disclosed and may be actively exploited. This product utilizes a rolling release model, therefore specific version details for affected and updated releases are unavailable.

Recommendations: Apply the patch with identifier b3e06559475b0130a7a2fb56ac4d131d13d2012f to address this issue.

Exploit

Correção

Heap Based Buffer Overflow

Buffer Overflow

Enumeração de Fraquezas

CWE-122

CWE-119

Identificadores relacionados

CVE-2025-7208

Produtos afetados

Plan9Port

Referências · 14

• 🔥❌ https://github.com/user-attachments/files/19698345/plan9port_crash_1.txt · Exploit, Deleted
• https://github.com/9fans/plan9port/issues/710#issuecomment-2819906648 · Correção
• https://osv.dev/vulnerability/CVE-2025-7208 · Aviso do Fabricante
• https://t.me/cveNotify/150581 · Publicação no Telegram
• https://drive.google.com/drive/folders/1kedwNLNDiFQB2OAp7S-ZKYoF7nxfIZGO?usp=sharing · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-7208 · Nota de Segurança
• https://vuldb.com/?submit.607684 · Nota
• https://vuldb.com/?submit.304567 · Nota
• https://vuldb.com/?id.259053 · Nota
• https://git.9front.org/plan9front/plan9front/b3e06559475b0130a7a2fb56ac4d131d13d2012f/commit.html · Correção
• https://twitter.com/VulmonFeeds/status/1942829201851117596 · Publicação no Twitter
• https://vuldb.com/?ctiid.259053 · Nota
• https://twitter.com/CVEnew/status/1942924484773917132 · Publicação no Twitter
• https://t.me/cvenotify/128125 · Publicação no Telegram