Fedora: Security Advisory (FEDORA-2025-d408d76c4a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libcoap-devel-4.3.5a-1.1 on GA media (moderate)

libcoap-devel-4.3.5a-1.1 on GA media Announcement ID: openSUSE-SU-2025:15780-1 Rating: moderate Cross-References: CVE-2025-65493 CVE-2025-65494 CVE-2025-65495 CVE-2025-65496 CVE-2025-65497 CVE-2025-65498 CVE-2025-65499 CVE-2025-65500 CVE-2025-65501 Affected Products: openSUSE Tumbleweed An update...

CVE-2025-65494

CVE-2025-65494 affects libcoap (notably libcoap 4.3.5 and Fedora 4.3.5a packages). It stems from a NULL pointer dereference in get_san_or_cn_from_cert() inside src/coap_openssl.c, which can be triggered by a crafted X.509 certificate and may cause a denial of service. The vulnerability is reporte...