> CVE-2025-8058

« BACK_TO_HOME
PUBLISHED
2025-07-23 20:15
MODIFIED
2025-07-25 15:29
EPSS (Prob. Exploit)
0.22%
Top 87.0%
DATA SOURCES:
NVD 🔗 2025-10-18 RED HAT 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08 MSRC 🔗 2026-06-01

> DESCRIPTION

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Enterprise Linux 10
Version: 2.39
Red Hat - Red Hat Enterprise Linux 8
Version: 2.28
Red Hat - Red Hat Enterprise Linux 9
Version: 2.34
Red Hat - Red Hat Discovery 2
Red Hat - Red Hat Insights proxy 1.5
Red Hat - Red Hat OpenShift distributed tracing 3.5.2

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage
A Subscription Management tool for finding and reporting Red Hat product usage
Red Hat Security Advisory: Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.2 release
Red Hat OpenShift distributed tracing platform (Jaeger) 3.5.2 has been released
Red Hat Security Advisory: Insights proxy Container Image
Initial GA Release of Red Hat Insights proxy
Red Hat Security Advisory: glibc security update
An update for glibc is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CV...
Red Hat Security Advisory: glibc security update
An update for glibc is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVS...
Red Hat Security Advisory: glibc security update
An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVS...
Red Hat Security Advisory: Red Hat Ceph Storage
A new version of Red Hat build of Ceph Storage has been released

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
236 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition
23/07/2025 20:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:06
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 18/10/2025 12:10
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 18/10/2025 12:10
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 1 year ago
« BACK_TO_HOME