Read the docs
TI-2025-02756 Aliases CVE-2025-3155GHSA-h7mx-548v-cr9r

Yelp: arbitrary file read

Priority HIGH 66CWE-601Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 18 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-601.

Summary

A flaw was found in Yelp. The Gnome user help application allows the help document to execute arbitrary scripts. This vulnerability allows malicious users to input help documents, which may exfiltrate user files to an external environment.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.13121 96th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Partial yelp: 42.2-8Red Hat: 9 advisoriesRed Hat: 18 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—yelpbefore 42.2-842.2-8Patch availableCNA
Red HatRed Hat Enterprise Linux 8—2:3.28.1-3.el8_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8—3.28.0-2.el8_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—2:3.28.1-3.el8_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—2:3.28.1-3.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—2:3.28.1-3.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—2:3.28.1-3.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—2:3.28.1-3.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—2:3.28.1-3.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—2:3.28.1-3.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Extended Update Support—2:3.28.1-3.el8_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—2:40.3-2.el9_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—2:40.3-2.el9_0.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Extended Update Support—2:40.3-2.el9_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—2:40.3-2.el9_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
Red HatRed Hat Enterprise Linux 7——No fix listedCNA
Red HatRed Hat Enterprise Linux 7——No fix listedCNA
Red HatRed Hat Enterprise Linux 9——No fix listedCNA
  • yelp Vendor— Affected before 42.2-8 Fixed in 42.2-8 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_10.1 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 3.28.0-2.el8_10.1 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_2.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Extended Update Support VendorRed Hat Affected — Fixed in 2:3.28.1-3.el8_8.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 2:40.3-2.el9_6.1 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 2:40.3-2.el9_0.1 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 2:40.3-2.el9_2.1 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 2:40.3-2.el9_4.1 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 63

CPEVersionsRoleVendor
cpe:2.3:a:gnome:yelp:42.2-8:*:*:*:*:*:*:*42.2-8VulnerableGNOME
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:*8.0_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:*:*:*:*:*:*:*9.0_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.8_aarch64:*:*:*:*:*:*:*8.8_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:*9.2_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:*:*:*:*:*:*:*9.4_aarch64VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.6_aarch64:*:*:*:*:*:*:*9.6_aarch64VulnerableRed Hat
  • cpe:2.3:a:gnome:yelp:42.2-8:*:*:*:*:*:*:* Versions 42.2-8 Vulnerable ·GNOME
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
  • cpe:2.3:a:redhat:codeready_linux_builder:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:8.0_aarch64:*:*:*:*:*:*:* Versions 8.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:8.8_aarch64:*:*:*:*:*:*:* Versions 8.8_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.2_aarch64:*:*:*:*:*:*:* Versions 9.2_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_arm64_eus:9.6_aarch64:*:*:*:*:*:*:* Versions 9.6_aarch64 Vulnerable ·Red Hat
Show 53 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:redhat:codeready_linux_builder_for_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*9.0_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*8.8_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*9.2_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*9.4_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*9.6_s390xVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*9.0_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*8.8_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*9.2_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*9.4_ppc64leVulnerableRed Hat
cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*9.6_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*9.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.8_aarch64:*:*:*:*:*:*:*8.8_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*9.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:*9.2_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*9.4_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*9.6_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*9.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*8.8_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:*9.2_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*9.4_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*9.6_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*9.0_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:*8.8_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:*9.2_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*9.4_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*9.6_ppc64leVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*9.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:*9.4VulnerableRed Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_eus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* Versions 8.8_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* Versions 9.6_s390x Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:codeready_linux_builder_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* Versions 9.6_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.8_aarch64:*:*:*:*:*:*:* Versions 8.8_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:* Versions 9.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:* Versions 9.2_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:* Versions 9.4_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:* Versions 9.6_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:* Versions 9.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:* Versions 8.8_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.2_s390x:*:*:*:*:*:*:* Versions 9.2_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:* Versions 9.4_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:* Versions 9.6_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:* Versions 9.0_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.8_ppc64le:*:*:*:*:*:*:* Versions 8.8_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.2_ppc64le:*:*:*:*:*:*:* Versions 9.2_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:* Versions 9.4_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:* Versions 9.6_ppc64le Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:* Versions 9.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.4:*:*:*:*:*:*:* Versions 9.4 Vulnerable ·Red Hat

Remediation

  • Fix · CNA yelp Fixed in 42.2-8

Red Hat 9 advisories

  • RHSA-2025:7569 Released 2025-05-14 · Red Hat rating Important
    yelp and yelp-xsl security update
    • Red Hat Enterprise Linux AppStream (v. 8) yelp-2:3.28.1-3.el8_10.1, yelp-libs-2:3.28.1-3.el8_10.1, yelp-xsl-3.28.0-2.el8_10.1
    • Red Hat Enterprise Linux CRB (v. 8) yelp-devel-2:3.28.1-3.el8_10.1
  • RHSA-2025:7430 Released 2025-05-13 · Red Hat rating Important
    yelp security update
    • Red Hat Enterprise Linux AppStream (v. 9) yelp-2:40.3-2.el9_6.1, yelp-libs-2:40.3-2.el9_6.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) yelp-devel-2:40.3-2.el9_6.1
  • RHSA-2025:4532 Released 2025-05-06 · Red Hat rating Important
    yelp security update
    • Red Hat CodeReady Linux Builder EUS (v.8.8) yelp-devel-2:3.28.1-3.el8_8.1
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) yelp-2:3.28.1-3.el8_8.1, yelp-libs-2:3.28.1-3.el8_8.1
Show 6 more Red Hat advisories
  • RHSA-2025:4505 Released 2025-05-06 · Red Hat rating Important
    yelp security update
    • Red Hat CodeReady Linux Builder EUS (v.9.2) yelp-devel-2:40.3-2.el9_2.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) yelp-2:40.3-2.el9_2.1, yelp-libs-2:40.3-2.el9_2.1
  • RHSA-2025:4456 Released 2025-05-05 · Red Hat rating Important
    yelp security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) yelp-devel-2:40.3-2.el9_4.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) yelp-2:40.3-2.el9_4.1, yelp-libs-2:40.3-2.el9_4.1
  • RHSA-2025:4455 Released 2025-05-05 · Red Hat rating Important
    yelp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) yelp-2:3.28.1-3.el8_6.1, yelp-libs-2:3.28.1-3.el8_6.1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) yelp-2:3.28.1-3.el8_6.1, yelp-libs-2:3.28.1-3.el8_6.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) yelp-2:3.28.1-3.el8_6.1, yelp-libs-2:3.28.1-3.el8_6.1
  • RHSA-2025:4457 Released 2025-05-05 · Red Hat rating Important
    yelp security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) yelp-2:3.28.1-3.el8_2.1, yelp-libs-2:3.28.1-3.el8_2.1
  • RHSA-2025:4450 Released 2025-05-05 · Red Hat rating Important
    yelp security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) yelp-2:40.3-2.el9_0.1, yelp-libs-2:40.3-2.el9_0.1
  • RHSA-2025:4451 Released 2025-05-05 · Red Hat rating Important
    yelp security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) yelp-2:3.28.1-3.el8_4.1, yelp-libs-2:3.28.1-3.el8_4.1
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) yelp-2:3.28.1-3.el8_4.1, yelp-libs-2:3.28.1-3.el8_4.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) yelp-2:3.28.1-3.el8_4.1, yelp-libs-2:3.28.1-3.el8_4.1

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat CodeReady Linux Builder EUS (v.8.8)Fixed RHSA-2025:4532
Red Hat CodeReady Linux Builder EUS (v.9.2)Fixed RHSA-2025:4505
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2025:4456
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:7569
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:7430
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2025:4457
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:4451
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:4455
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2025:4451
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:4455
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:4450
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2025:4532
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:4505
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:4456
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2025:4451
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:4455
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2025:7569
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2025:7430

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3155
  2. 2026-10-03 Alias added: GHSA-h7mx-548v-cr9r

References

Exploit 2

Advisory 10

Other 1

  • TI-2019-06284 Memory corruption in webkitgtk KEVCVSS 3.1HIGH 8.8
  • TI-2023-04522 Glibc: buffer overflow in ld.so leading to privilege escalation KEVCVSS 3.1HIGH 7.8
  • TI-2022-00753 A flaw was found in the way the "flags" member of the new pipe buffer structure was… KEVCVSS 3.1HIGH 7.8
  • TI-2022-00413 Improper authentication in kernel KEVCVSS 3.1HIGH 7.8
  • TI-2021-19843 Out-of-bounds read in Samba CVSS 3.1HIGH 8.8
  • TI-2022-00359 Out-of-bounds write in kernel CVSS 3.1HIGH 8.8
See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences