Lucene search
+L

7 matches found

AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.8 views

Astra Linux – Vulnerability in Lasso

There is a denial-of-service vulnerability in the gassertnotreached functionality of Entr’ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial-of-service attack. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS7.1AI score0.00573EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/11/06 3:02 p.m.9 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. Mitigation Mitigation fo...

7.5CVSS6.2AI score0.00573EPSS
SaveExploits1References5
OSV
OSV
added 2025/11/05 3:15 p.m.10 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2025/11/05 3:15 p.m.8 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS0.00573EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/11/05 2:56 p.m.7 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS5.3AI score0.00573EPSS
SaveExploits1
CNNVD
CNNVD
added 2025/11/05 12:00 a.m.8 views

Entrouvert Lasso 安全漏洞

Entrouvert Lasso is a single sign-on protocol implementation library open-sourced by Entrouvert France. A security vulnerability exists in Entrouvert Lasso versions 2.5.1 and 2.8.2, which stems from a flaw in the gassertnotreached function that could lead to a denial of service attack...

7.5CVSS6.2AI score0.00573EPSS
SaveExploits1References2
Talos
Talos
added 2025/11/05 12:00 a.m.16 views

Entr'ouvert Lasso g_assert_not_reached denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2196 Entr'ouvert Lasso gassertnotreached denial of service vulnerability November 5, 2025 CVE Number CVE-2025-46705 SUMMARY A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially craft...

7.5CVSS7.2AI score0.00573EPSS
SaveExploits1
Rows per page
Query Builder