PT-2025-8665 · Alt Linux+5 · Alt Linux+5

Jub0Bs · Published 2025-02-25 · Updated 2026-05-21 · CVE-2025-22868

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description An issue exists where an attacker can pass a malicious malformed token, causing unexpected memory consumption during parsing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-1286

Related Identifiers

ALT-PU-2025-12493

ALT-PU-2025-13603

ALT-PU-2025-9744

AZL-57306

AZL-57309

AZL-57312

AZL-57315

AZL-57324

AZL-57335

AZL-57338

AZL-57339

AZL-57344

AZL-57356

AZL-57363

AZL-57384

AZL-57389

AZL-57407

AZL-57410

AZL-57422

AZL-57425

AZL-57443

AZL-57449

AZL-57450

AZL-57453

AZL-57462

AZL-57467

BDU:2025-03638

CLEANSTART-2025-ZR62045

CLEANSTART-2026-AC01087

CLEANSTART-2026-AR20742

CLEANSTART-2026-AT12816

CLEANSTART-2026-BK17545

CLEANSTART-2026-BM53321

CLEANSTART-2026-CR41732

CLEANSTART-2026-DM93480

CLEANSTART-2026-DN29911

CLEANSTART-2026-EJ93145

CLEANSTART-2026-GG94489

CLEANSTART-2026-HV96032

CLEANSTART-2026-HX94762

CLEANSTART-2026-HZ73294

CLEANSTART-2026-JM16286

CLEANSTART-2026-KC83705

CLEANSTART-2026-KL76732

CLEANSTART-2026-MD91760

CLEANSTART-2026-NX54250

CLEANSTART-2026-OC72960

CLEANSTART-2026-OJ41940

CLEANSTART-2026-OL12277

CLEANSTART-2026-RI97043

CLEANSTART-2026-RR42740

CLEANSTART-2026-SQ68600

CLEANSTART-2026-TL66481

CLEANSTART-2026-WB86581

CLEANSTART-2026-ZR62045

CVE-2025-22868

ECHO-020F-4644-C875

GHSA-3WQC-MWFX-672P

GHSA-6V2P-P543-PHR9

GO-2025-3488

INFSA-2025_3335

OPENSUSE-SU-2025:0091-1

OPENSUSE-SU-2025:0103-1

OPENSUSE-SU-2025:14839-1

OPENSUSE-SU-2025:14843-1

OPENSUSE-SU-2025:14868-1

OPENSUSE-SU-2025:14869-1

OPENSUSE-SU-2025:14870-1

OPENSUSE-SU-2025:14874-1

OPENSUSE-SU-2025:14904-1

OPENSUSE-SU-2025:14905-1

OPENSUSE-SU-2025:14923-1

OPENSUSE-SU-2025:14985-1

OPENSUSE-SU-2025:14988-1

OPENSUSE-SU-2025:14990-1

OPENSUSE-SU-2025:15184-1

OPENSUSE-SU-2025:15304-1

OPENSUSE-SU-2025:15305-1

OPENSUSE-SU-2025:15454-1

OPENSUSE-SU-2025:20117-1

OPENSUSE-SU-2025_0882-1

OPENSUSE-SU-2025_1005-1

OPENSUSE-SU-2025_1006-1

OPENSUSE-SU-2025_1062-1

OPENSUSE-SU-2025_1332-1

OPENSUSE-SU-2025_1333-1

OPENSUSE-SU-2026:10230-1

OPENSUSE-SU-2026:20279-1

OPENSUSE-SU-2026:20798-1

RHSA-2025:3335

RHSA-2025:3593

RHSA-2025:7407

RHSA-2025:7479

RHSA-2025_3335

RHSA-2025_7407

SUSE-SU-2025:02014-1

SUSE-SU-2025:02035-1

SUSE-SU-2025:02040-1

SUSE-SU-2025:02041-1

SUSE-SU-2025:02046-1

SUSE-SU-2025:02097-1

SUSE-SU-2025:03540-1

SUSE-SU-2025:03545-1

SUSE-SU-2025:0770-1

SUSE-SU-2025:0852-1

SUSE-SU-2025:0872-1

SUSE-SU-2025:0881-1

SUSE-SU-2025:0882-1

SUSE-SU-2025:1005-1

SUSE-SU-2025:1006-1

SUSE-SU-2025:1062-1

SUSE-SU-2025:1102-1

SUSE-SU-2025:1332-1

SUSE-SU-2025:1333-1

SUSE-SU-2025:20205-1

SUSE-SU-2025:20360-1

SUSE-SU-2025:20377-1

SUSE-SU-2025:20393-1

SUSE-SU-2025:20515-1

SUSE-SU-2025_02014-1

SUSE-SU-2025_0852-1

SUSE-SU-2025_0872-1

SUSE-SU-2025_0881-1

SUSE-SU-2025_0882-1

SUSE-SU-2025_1005-1

SUSE-SU-2025_1006-1

SUSE-SU-2026:0592-1

SUSE-SU-2026:0972-1

SUSE-SU-2026:1118-1

SUSE-SU-2026:20550-1

SUSE-SU-2026:21989-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Hat

Red Os

Suse

References · 709

• https://osv.dev/vulnerability/AZL-57356 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/719563 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14988-1 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-HX94762 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-22868 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03545-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25679 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2025-ZR62045 · Vendor Advisory
• https://go.dev/cl/652155 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:0882-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:0103-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-44487 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20279-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03540-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02014-1 · Vendor Advisory