Vulnerabilidades de Entrouvert
CVEs publicadas que afetam produtos de Entrouvert: 4 registro(s), com severidade, exploração e correções.
CVE-2025-47151
Crítica · 9.8
CWE-843 05/11/2025
Type Confusion em Entrouvert Lasso
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
CVE-2025-46784
Alta · 7.5
CWE-401 05/11/2025
Missing Release of Memory after Effective Lifetime em Entrouvert Lasso
A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
CVE-2025-46705
Alta · 7.5
CWE-617 05/11/2025
A denial of service vulnerability exists in the g_assert_not_reached functionality of…
A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
CVE-2025-46404
Alta · 7.5
CWE-476 05/11/2025
NULL Pointer Dereference em Entrouvert Lasso
A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.