CVE-2025-55014

🗓️ 04 Aug 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 30 Views

YouDao plugin for StarDict sends X11 selection to servers via unencrypted HTTP connections.

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2025-55014	8 Aug 202510:24	–	circl
CNNVD	StarDict 安全漏洞	4 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-55014	4 Aug 202500:00	–	cvelist
Debian CVE	CVE-2025-55014	4 Aug 202500:00	–	debiancve
EUVD	EUVD-2025-23543	3 Oct 202520:07	–	euvd
Mageia	Updated stardict packages fix security vulnerability	15 Nov 202507:11	–	mageia
NVD	CVE-2025-55014	4 Aug 202520:15	–	nvd
OpenVAS	Mageia: Security Advisory (MGASA-2025-0298)	17 Nov 202500:00	–	openvas
OSV	DEBIAN-CVE-2025-55014	4 Aug 202520:15	–	osv
OSV	MGASA-2025-0298 Updated stardict packages fix security vulnerability	15 Nov 202507:11	–	osv

Vulners

CNA

Node

stardict stardictRange0–3.0.7+git20220909+dfsg-6

[
  {
    "defaultStatus": "unknown",
    "product": "StarDict",
    "vendor": "StarDict",
    "versions": [
      {
        "lessThanOrEqual": "3.0.7+git20220909+dfsg-6",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2025/08/04/1
stardict-4	www.stardict-4.sourceforge.net/index_en.php
packages	www.packages.debian.org/trixie/stardict
packages	www.packages.debian.org/trixie/stardict-gtk
lists	www.lists.debian.org/debian-user/2025/08/msg00076.html
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
news	www.news.ycombinator.com/item
openwall	www.openwall.com/lists/oss-security/2025/08/08/2
lwn	www.lwn.net/SubscriberLink/1032732/3334850da49689e1/

15 Apr 2026 00:35Current

7.2High risk

Vulners AI Score7.2

CVSS 3.14.7

EPSS0.00755

SSVC

CWE-402