PT-2025-45108 · Unknown+4 · Entr’Ouvert Lasso+4

Keane Okelley · Published 2025-11-05 · Updated 2025-12-08 · CVE-2025-46705

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Entr’ouvert Lasso versions 2.5.1 and 2.8.2

Description A denial of service issue exists in the g assert not reached functionality. A specially crafted SAML assertion response can cause a denial of service. An attacker can trigger this by sending a malformed SAML response.

Recommendations Update to a newer version of Entr’ouvert Lasso that addresses this issue.

Exploit

Fix

DoS

RCE

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

AZL-69844

AZL-69857

BDU:2026-05071

CVE-2025-46705

DLA-4397-1

DSA-6058-1

OESA-2025-2662

OESA-2025-2663

OESA-2025-2664

OESA-2025-2665

OESA-2025-2666

OPENSUSE-SU-2025:20083-1

SUSE-SU-2025:21140-1

SUSE-SU-2025:4068-1

SUSE-SU-2025:4090-1

SUSE-SU-2025:4094-1

USN-7872-1

Affected Products

Debian

Entr’Ouvert Lasso

Linuxmint

Suse

Ubuntu

References · 52

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2025-2196 · Exploit
• https://osv.dev/vulnerability/OESA-2025-2664 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20083-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2666 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46784 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2665 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2663 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-69857 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4094-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46705 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46404 · Security Note
• https://osv.dev/vulnerability/USN-7872-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-47151 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21140-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-46705 · Vendor Advisory