TI-2025-00314 Aliases CVE-2025-0395 GHSA-4xpw-6594-8f5m

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not…

MEDIUM 61CWE-131Published 2025-01-22 · Updated 2026-10-15

Key facts

Attack vector: Local
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: Partial Red Hat: 15 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-131 and the CVSS impact.

Summary

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00357 29th percentileScored 2026-11-07

Fix Partial Red Hat: 5 advisoriesRed Hat: 15 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
GNU	glibc	2.13 – 2.40	—	No fix listed	CNA

glibc VendorGNU Affected 2.13 – 2.40 Fixed in — No fix listed CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:gnu:glibc::::::::	—	—	GNU

cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* Versions — — ·GNU

Remediation

Red Hat 5 advisories

RHSA-2025:4244 Released 2025-04-28 · Red Hat rating Moderate
glibc security update
- Red Hat CodeReady Linux Builder (v. 9) glibc-benchtests-2.34-125.el9_5.8, glibc-nss-devel-2.34-125.el9_5.8, glibc-static-2.34-125.el9_5.8 +2
- Red Hat Enterprise Linux AppStream (v. 9) glibc-devel-2.34-125.el9_5.8, glibc-doc-2.34-125.el9_5.8, glibc-headers-2.34-125.el9_5.8 +2
- Red Hat Enterprise Linux BaseOS (v. 9) glibc-2.34-125.el9_5.8, glibc-all-langpacks-2.34-125.el9_5.8, glibc-common-2.34-125.el9_5.8 +47
RHSA-2025:4241 Released 2025-04-28 · Red Hat rating Moderate
glibc security update
- Red Hat CodeReady Linux Builder EUS (v.9.2) glibc-benchtests-2.34-60.el9_2.17, glibc-nss-devel-2.34-60.el9_2.17, glibc-static-2.34-60.el9_2.17 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.2) glibc-devel-2.34-60.el9_2.17, glibc-doc-2.34-60.el9_2.17, glibc-headers-2.34-60.el9_2.17 +2
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) glibc-2.34-60.el9_2.17, glibc-all-langpacks-2.34-60.el9_2.17, glibc-common-2.34-60.el9_2.17 +47
RHSA-2025:4243 Released 2025-04-28 · Red Hat rating Moderate
glibc security update
- Red Hat CodeReady Linux Builder EUS (v.9.4) glibc-benchtests-2.34-100.el9_4.10, glibc-nss-devel-2.34-100.el9_4.10, glibc-static-2.34-100.el9_4.10 +2
- Red Hat Enterprise Linux AppStream EUS (v.9.4) glibc-devel-2.34-100.el9_4.10, glibc-doc-2.34-100.el9_4.10, glibc-headers-2.34-100.el9_4.10 +2
- Red Hat Enterprise Linux BaseOS EUS (v.9.4) glibc-2.34-100.el9_4.10, glibc-all-langpacks-2.34-100.el9_4.10, glibc-common-2.34-100.el9_4.10 +47

Show 2 more Red Hat advisories

RHSA-2025:4242 Released 2025-04-28 · Red Hat rating Moderate
glibc security update
- Red Hat Enterprise Linux AppStream E4S (v.9.0) glibc-devel-2.34-28.el9_0.8, glibc-doc-2.34-28.el9_0.8, glibc-headers-2.34-28.el9_0.8 +2
- Red Hat Enterprise Linux BaseOS E4S (v.9.0) glibc-2.34-28.el9_0.8, glibc-all-langpacks-2.34-28.el9_0.8, glibc-common-2.34-28.el9_0.8 +47
RHSA-2025:3828 Released 2025-04-14 · Red Hat rating Moderate
glibc security update
- Red Hat Enterprise Linux AppStream (v. 8) compat-libpthread-nonshared-2.28-251.el8_10.16, glibc-utils-2.28-251.el8_10.16
- Red Hat Enterprise Linux BaseOS (v. 8) glibc-2.28-251.el8_10.16, glibc-all-langpacks-2.28-251.el8_10.16, glibc-common-2.28-251.el8_10.16 +47
- Red Hat Enterprise Linux CRB (v. 8) glibc-benchtests-2.28-251.el8_10.16, glibc-nss-devel-2.28-251.el8_10.16, glibc-static-2.28-251.el8_10.16 +1

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 7	Affected	No fix planned: Will not fix
Red Hat OpenShift Container Platform 4	Affected	No fix yet: Fix deferred
Red Hat CodeReady Linux Builder (v. 9)	Fixed	RHSA-2025:4244
Red Hat CodeReady Linux Builder EUS (v.9.2)	Fixed	RHSA-2025:4241
Red Hat CodeReady Linux Builder EUS (v.9.4)	Fixed	RHSA-2025:4243
Red Hat Enterprise Linux AppStream (v. 8)	Fixed	RHSA-2025:3828
Red Hat Enterprise Linux AppStream (v. 9)	Fixed	RHSA-2025:4244
Red Hat Enterprise Linux AppStream E4S (v.9.0)	Fixed	RHSA-2025:4242
Red Hat Enterprise Linux AppStream EUS (v.9.2)	Fixed	RHSA-2025:4241
Red Hat Enterprise Linux AppStream EUS (v.9.4)	Fixed	RHSA-2025:4243
Red Hat Enterprise Linux BaseOS (v. 8)	Fixed	RHSA-2025:3828
Red Hat Enterprise Linux BaseOS (v. 9)	Fixed	RHSA-2025:4244
Red Hat Enterprise Linux BaseOS E4S (v.9.0)	Fixed	RHSA-2025:4242
Red Hat Enterprise Linux BaseOS EUS (v.9.2)	Fixed	RHSA-2025:4241
Red Hat Enterprise Linux BaseOS EUS (v.9.4)	Fixed	RHSA-2025:4243
Red Hat Enterprise Linux CRB (v. 8)	Fixed	RHSA-2025:3828
Red Hat build of Keycloak 26.2	Fixed	—

Not affected: 1 product

Red Hat Enterprise Linux 10

Timeline

2026-10-02 Threatist record created from CVE-2025-0395
2026-10-03 Alias added: GHSA-4xpw-6594-8f5m
2026-10-21 Affected versions changed · Red Hat
2026-10-22 Affected versions changed · Red Hat
2026-10-30 Fix available: Red Hat build of Keycloak 26.2 · Red Hat

References

Other 4

TI-2026-19388 telnetd in GNU Inetutils through 2.7 allows remote authentication bypass via a "-f root"… KEVCVSS 3.1CRITICAL 9.8
TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
TI-2014-05164 GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the… KEVCVSS 3.1HIGH 8.8
TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8

See all 1272 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences