Get real-time updates on Telegram
CVE-2025-13601: codeready linux builder 9.0; +61 more affected products
CVE-2025-13601. CVSS 3.1 base score 7.7 (HIGH, Vendor/CNA). EPSS 0.00322 (percentile 0.2371), scored 17-Oct-2026.
Affected technology
codeready linux builder · 9.0
redhat
codeready linux builder for ibm z systems · 9.0_s390x
redhat
codeready linux builder for power little endian · 9.0_ppc64le
redhat
codeready linux builder for x86 64 · 9.0
redhat
enterprise linux for arm 64 · 9.0
redhat
enterprise linux for ibm z systems · 9.0_s390x
redhat
enterprise linux for power little endian · 9.0_ppc64le
redhat
enterprise linux for x86 64 · 9.0
redhat
codeready linux builder for arm64 · 10.0
redhat
codeready linux builder for ibm z systems · 10.0_s390x
redhat
codeready linux builder for power little endian · 10.0_ppc64le
redhat
codeready linux builder for x86 64 · 10.0
redhat
enterprise linux for arm 64 · 10.0
redhat
enterprise linux for ibm z systems · 10.0_s390x
redhat
enterprise linux for power little endian · 10.0_ppc64le
redhat
enterprise linux for x86 64 · 10.0
redhat
codeready linux builder for arm64 · 8.0
redhat
codeready linux builder for ibm z systems · 8.0_s390x
redhat
codeready linux builder for power little endian · 8.0_ppc64le
redhat
codeready linux builder for x86 64 · 8.0
redhat
enterprise linux for arm 64 · 8.0
redhat
enterprise linux for ibm z systems · 8.0_s390x
redhat
enterprise linux for power little endian · 8.0_ppc64le
redhat
enterprise linux for x86 64 · 8.0
redhat
enterprise linux for arm 64 · 9.2
redhat
enterprise linux for ibm z systems · 9.2_s390x
redhat
enterprise linux for power little endian · 9.2_ppc64le
redhat
enterprise linux for x86 64 · 9.2
redhat
enterprise linux server aus · 9.2
redhat
codeready linux builder for arm64 eus · 9.4
redhat
codeready linux builder for ibm z systems · 9.4_s390x
redhat
codeready linux builder for power little endian · 9.4_ppc64le
redhat
codeready linux builder for x86 64 · 9.4
redhat
enterprise linux for arm 64 · 9.4
redhat
enterprise linux for ibm z systems · 9.4_s390x
redhat
enterprise linux for power little endian · 9.4_ppc64le
redhat
enterprise linux for x86 64 · 9.4
redhat
enterprise linux for x86 64 eus · 9.4
redhat
enterprise linux server aus · 9.4
redhat
enterprise linux server for power little endian · 9.4_ppc64le
redhat
enterprise linux server for power little endian eus · 9.4_ppc64le
redhat
codeready linux builder for arm64 eus · 10.0
redhat
codeready linux builder for ibm z systems eus · 10.0_s390x
redhat
codeready linux builder for power little endian eus · 10.0_ppc64le
redhat
codeready linux builder for x86 64 eus · 10.0
redhat
enterprise linux for arm 64 eus · 10.0
redhat
enterprise linux for ibm z systems eus · 10.0_s390x
redhat
enterprise linux for power little endian eus · 10.0_ppc64le
redhat
enterprise linux for x86 64 eus · 10.0
redhat
enterprise linux server for power little endian · 10.0_ppc64le
redhat
codeready linux builder for arm64 · 9.6
redhat
codeready linux builder for ibm z systems · 9.6_s390x
redhat
codeready linux builder for power little endian · 9.6_ppc64le
redhat
codeready linux builder for x86 64 · 9.6
redhat
enterprise linux for arm 64 · 9.6
redhat
enterprise linux for ibm z systems · 9.6_s390x
redhat
enterprise linux for power little endian · 9.6_ppc64le
redhat
enterprise linux for power little endian eus · 9.6_ppc64le
redhat
enterprise linux for x86 64 · 9.6
redhat
enterprise linux for x86 64 eus · 9.6
redhat
enterprise linux server aus · 9.6
redhat
enterprise linux server for power little endian · 9.6_ppc64le
redhat
enterprise linux for x86 64 · 8.6
redhat
enterprise linux for x86 64 eus · 8.6
redhat
enterprise linux server aus · 8.6
redhat
enterprise linux server for power little endian · 8.6_ppc64le
redhat
enterprise linux server tus · 8.6
redhat
enterprise linux for x86 64 · 8.8
redhat
enterprise linux for x86 64 eus · 8.8
redhat
enterprise linux server for power little endian · 8.8_ppc64le
redhat
enterprise linux server tus · 8.8
redhat
enterprise linux for x86 64 eus · 8.4
redhat
enterprise linux server aus · 8.4
redhat
enterprise linux server aus · 8.2
redhat
ceph storage · 8.0
redhat
discovery · 2.0
redhat
glib · before 2.86.3 (exclusive)
gnome
openshift container platform · 4.12
redhat
openshift container platform · 4.16
redhat
openshift container platform · 4.17
redhat
openshift container platform · 4.18
redhat
openshift container platform · 4.19
redhat
openshift container platform for arm64 · 4.12
redhat
openshift container platform for arm64 · 4.16
redhat
openshift container platform for arm64 · 4.17
redhat
openshift container platform for arm64 · 4.18
redhat
openshift container platform for arm64 · 4.19
redhat
openshift container platform for ibm z · 4.12
redhat
openshift container platform for ibm z · 4.16
redhat
openshift container platform for ibm z · 4.17
redhat
openshift container platform for ibm z · 4.18
redhat
openshift container platform for ibm z · 4.19
redhat
openshift container platform for linuxone · 4.12
redhat
openshift container platform for linuxone · 4.16
redhat
openshift container platform for linuxone · 4.17
redhat
openshift container platform for linuxone · 4.18
redhat
openshift container platform for linuxone · 4.19
redhat
openshift container platform for power · 4.12
redhat
openshift container platform for power · 4.16
redhat
openshift container platform for power · 4.17
redhat
openshift container platform for power · 4.18
redhat
openshift container platform for power · 4.19
redhat
Product not specified by the source · 0 to before 2.86.3
Vendor not specified by the source
Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.2 Advanced Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.4 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 9.6 Extended Update Support · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.12 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.13 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.14 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.15 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.16 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.17 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.18 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4.19 · Exact affected versions not specified by the source
Red Hat
Red Hat Ceph Storage 8 · Exact affected versions not specified by the source
Red Hat
Red Hat Discovery 2 · Exact affected versions not specified by the source
Red Hat
Red Hat Hardened Images · Exact affected versions not specified by the source
Red Hat
Red Hat Insights proxy 1.5 · Exact affected versions not specified by the source
Red Hat
Red Hat Update Infrastructure 5 · Exact affected versions not specified by the source
Red Hat
Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat
Red Hat OpenShift Container Platform 4 · Exact affected versions not specified by the source
Red Hat
RUGGEDCOM RST2428P · 0 to before V4.0
Siemens
Description’s affected range: through an incorrect calculation of buffer size in the g_escape_uri_string() function
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Local · No privileges required · No user interaction required
What an attacker can do
Vendor/CNA’s CVSS 3.1 assessment (base score 7.7/10) rates confidentiality impact as none; integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-190
- CCR priority
- 30.9 /100 (P4)
- CVSS 3.1
- 7.7 /10 · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · Vendor/CNA
- EPSS
- 0.00322 · percentile 0.2371 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 20:23:06.032219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-13601.html