PT-2025-23988 · Alt Linux+3 · Alt Linux+3

Krzysztof Skrzętnicki + 1 · Published 2025-05-06 · Updated 2025-09-11 · CVE-2025-22874

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue arises when calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny, which unintentionally disables policy validation. This affects certificate chains containing policy graphs, a relatively uncommon occurrence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

ALT-PU-2025-10791

ALT-PU-2025-8122

AZL-63872

AZL-72104

AZL-78986

BDU:2025-08556

BIT-GOLANG-2025-22874

CVE-2025-22874

ECHO-4E0E-8B9E-064D

GO-2025-3749

MGASA-2025-0184

OPENSUSE-SU-2025:15224-1

OPENSUSE-SU-2025:15225-1

OPENSUSE-SU-2025:15251-1

OPENSUSE-SU-2025:15263-1

OPENSUSE-SU-2025:15379-1

RHSA-2025:10676

RHSA-2025:10677

RHSA-2025_10676

SUSE-SU-2025:01846-1

SUSE-SU-2025:02120-1

SUSE-SU-2025:03158-1

SUSE-SU-2025_01846-1

SUSE-SU-2025_02120-1

SUSE-SU-2025_03158-1

Affected Products

Alt Linux

Red Hat

Red Os

Suse

References · 93

• https://bdu.fstec.ru/vul/2025-08556 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03158-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-22874 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15263-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-72104 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0184.html · Security Note
• https://osv.dev/vulnerability/BIT-golang-2025-22874 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-22874 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-78986 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15251-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-22874 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0184 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01846-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02120-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15225-1 · Vendor Advisory