csaf_suse - suse-su-2025:0979-1

Vulnerability from csaf_suse

Published

2025-03-21 12:54

Modified

2025-03-21 12:54

Summary

Security update for zvbi

Notes

Title of the patch

Security update for zvbi

Description of the patch

This update for zvbi fixes the following issues: - CVE-2025-2173: Fixed check on src_length to avoid an unitinialized heap read (bsc#1239222). - CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c (bsc#1239299). - CVE-2025-2175: Fixed integer overflow in _vbi_strndup_iconv (bsc#1239312). - CVE-2025-2176: Fixed integer overflow in function vbi_capture_sim_load_caption in src/io-sim.c (bsc#1239319). - CVE-2025-2177: Fixed integer overflow in function vbi_search_new in src/search.c (bsc#1239320).

Patchnames

SUSE-2025-979,SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-979,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-979,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-979,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-979,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-979,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-979,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-979,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-979,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-979,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-979,openSUSE-SLE-15.6-2025-979

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for zvbi",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for zvbi fixes the following issues:\n  \n  - CVE-2025-2173: Fixed check on src_length to avoid an unitinialized heap read (bsc#1239222).\n  - CVE-2025-2174: Fixed integer overflow leading to heap overflow in src/conv.c, src/io-sim.c, src/search.c (bsc#1239299).\n  - CVE-2025-2175: Fixed integer overflow in _vbi_strndup_iconv (bsc#1239312).\n  - CVE-2025-2176: Fixed integer overflow in function vbi_capture_sim_load_caption in src/io-sim.c (bsc#1239319).\n  - CVE-2025-2177: Fixed integer overflow in function vbi_search_new in src/search.c (bsc#1239320).\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2025-979,SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-979,SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-979,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-979,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-979,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-979,SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-979,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-979,SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-979,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-979,SUSE-SLE-Product-SLES_SAP-15-SP5-2025-979,openSUSE-SLE-15.6-2025-979",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_0979-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2025:0979-1",
            url: "https://www.suse.com/support/update/announcement/2025/suse-su-20250979-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2025:0979-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020575.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1239222",
            url: "https://bugzilla.suse.com/1239222",
         },
         {
            category: "self",
            summary: "SUSE Bug 1239299",
            url: "https://bugzilla.suse.com/1239299",
         },
         {
            category: "self",
            summary: "SUSE Bug 1239312",
            url: "https://bugzilla.suse.com/1239312",
         },
         {
            category: "self",
            summary: "SUSE Bug 1239319",
            url: "https://bugzilla.suse.com/1239319",
         },
         {
            category: "self",
            summary: "SUSE Bug 1239320",
            url: "https://bugzilla.suse.com/1239320",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-2173 page",
            url: "https://www.suse.com/security/cve/CVE-2025-2173/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-2174 page",
            url: "https://www.suse.com/security/cve/CVE-2025-2174/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-2175 page",
            url: "https://www.suse.com/security/cve/CVE-2025-2175/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-2176 page",
            url: "https://www.suse.com/security/cve/CVE-2025-2176/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2025-2177 page",
            url: "https://www.suse.com/security/cve/CVE-2025-2177/",
         },
      ],
      title: "Security update for zvbi",
      tracking: {
         current_release_date: "2025-03-21T12:54:02Z",
         generator: {
            date: "2025-03-21T12:54:02Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2025:0979-1",
         initial_release_date: "2025-03-21T12:54:02Z",
         revision_history: [
            {
               date: "2025-03-21T12:54:02Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                        product: {
                           name: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                           product_id: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
                        product: {
                           name: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
                           product_id: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-0.2.35-150000.4.3.1.aarch64",
                        product: {
                           name: "zvbi-0.2.35-150000.4.3.1.aarch64",
                           product_id: "zvbi-0.2.35-150000.4.3.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                        product: {
                           name: "zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                           product_id: "zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                        product: {
                           name: "libzvbi-chains0-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                           product_id: "libzvbi-chains0-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                        product: {
                           name: "libzvbi0-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                           product_id: "libzvbi0-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                        product: {
                           name: "zvbi-devel-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                           product_id: "zvbi-devel-64bit-0.2.35-150000.4.3.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-0.2.35-150000.4.3.1.i586",
                        product: {
                           name: "libzvbi-chains0-0.2.35-150000.4.3.1.i586",
                           product_id: "libzvbi-chains0-0.2.35-150000.4.3.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-0.2.35-150000.4.3.1.i586",
                        product: {
                           name: "libzvbi0-0.2.35-150000.4.3.1.i586",
                           product_id: "libzvbi0-0.2.35-150000.4.3.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-0.2.35-150000.4.3.1.i586",
                        product: {
                           name: "zvbi-0.2.35-150000.4.3.1.i586",
                           product_id: "zvbi-0.2.35-150000.4.3.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-0.2.35-150000.4.3.1.i586",
                        product: {
                           name: "zvbi-devel-0.2.35-150000.4.3.1.i586",
                           product_id: "zvbi-devel-0.2.35-150000.4.3.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "zvbi-lang-0.2.35-150000.4.3.1.noarch",
                        product: {
                           name: "zvbi-lang-0.2.35-150000.4.3.1.noarch",
                           product_id: "zvbi-lang-0.2.35-150000.4.3.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                        product: {
                           name: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                           product_id: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                        product: {
                           name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                           product_id: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-0.2.35-150000.4.3.1.ppc64le",
                        product: {
                           name: "zvbi-0.2.35-150000.4.3.1.ppc64le",
                           product_id: "zvbi-0.2.35-150000.4.3.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                        product: {
                           name: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                           product_id: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                        product: {
                           name: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                           product_id: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-0.2.35-150000.4.3.1.s390x",
                        product: {
                           name: "libzvbi0-0.2.35-150000.4.3.1.s390x",
                           product_id: "libzvbi0-0.2.35-150000.4.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-0.2.35-150000.4.3.1.s390x",
                        product: {
                           name: "zvbi-0.2.35-150000.4.3.1.s390x",
                           product_id: "zvbi-0.2.35-150000.4.3.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-0.2.35-150000.4.3.1.s390x",
                        product: {
                           name: "zvbi-devel-0.2.35-150000.4.3.1.s390x",
                           product_id: "zvbi-devel-0.2.35-150000.4.3.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                           product_id: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                           product_id: "libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
                           product_id: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                           product_id: "libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "zvbi-0.2.35-150000.4.3.1.x86_64",
                           product_id: "zvbi-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                           product_id: "zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                        product: {
                           name: "zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                           product_id: "zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
                           product_id: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-desktop-applications:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                        product: {
                           name: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                           product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:packagehub:15:sp6",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-espos:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-espos:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP5-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP5-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.6",
                        product: {
                           name: "openSUSE Leap 15.6",
                           product_id: "openSUSE Leap 15.6",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.6",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.s390x as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Desktop Applications 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP6",
               product_id: "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Module for Package Hub 15 SP6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP5-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "zvbi-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.aarch64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.s390x as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "zvbi-devel-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64 as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
            },
            product_reference: "zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "zvbi-lang-0.2.35-150000.4.3.1.noarch as component of openSUSE Leap 15.6",
               product_id: "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
            },
            product_reference: "zvbi-lang-0.2.35-150000.4.3.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.6",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2025-2173",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-2173",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-2173",
               url: "https://www.suse.com/security/cve/CVE-2025-2173",
            },
            {
               category: "external",
               summary: "SUSE Bug 1239222 for CVE-2025-2173",
               url: "https://bugzilla.suse.com/1239222",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-21T12:54:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-2173",
      },
      {
         cve: "CVE-2025-2174",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-2174",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to integer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is named ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-2174",
               url: "https://www.suse.com/security/cve/CVE-2025-2174",
            },
            {
               category: "external",
               summary: "SUSE Bug 1239299 for CVE-2025-2174",
               url: "https://bugzilla.suse.com/1239299",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-21T12:54:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-2174",
      },
      {
         cve: "CVE-2025-2175",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-2175",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-2175",
               url: "https://www.suse.com/security/cve/CVE-2025-2175",
            },
            {
               category: "external",
               summary: "SUSE Bug 1239312 for CVE-2025-2175",
               url: "https://bugzilla.suse.com/1239312",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-21T12:54:02Z",
               details: "moderate",
            },
         ],
         title: "CVE-2025-2175",
      },
      {
         cve: "CVE-2025-2176",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-2176",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The identifier of the patch is ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-2176",
               url: "https://www.suse.com/security/cve/CVE-2025-2176",
            },
            {
               category: "external",
               summary: "SUSE Bug 1239319 for CVE-2025-2176",
               url: "https://bugzilla.suse.com/1239319",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-21T12:54:02Z",
               details: "important",
            },
         ],
         title: "CVE-2025-2176",
      },
      {
         cve: "CVE-2025-2177",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2025-2177",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
               "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
               "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2025-2177",
               url: "https://www.suse.com/security/cve/CVE-2025-2177",
            },
            {
               category: "external",
               summary: "SUSE Bug 1239320 for CVE-2025-2177",
               url: "https://bugzilla.suse.com/1239320",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Desktop Applications 15 SP6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Module for Package Hub 15 SP6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP5-LTSS:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP5:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi-chains0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi-chains0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:libzvbi0-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:libzvbi0-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.aarch64",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.ppc64le",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.s390x",
                  "openSUSE Leap 15.6:zvbi-devel-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-devel-32bit-0.2.35-150000.4.3.1.x86_64",
                  "openSUSE Leap 15.6:zvbi-lang-0.2.35-150000.4.3.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2025-03-21T12:54:02Z",
               details: "important",
            },
         ],
         title: "CVE-2025-2177",
      },
   ],
}

CVE-2025-2177 (GCVE-0-2025-2177)

Vulnerability from cvelistv5

Published

2025-03-11 07:31

Modified

2025-03-11 14:12

Severity ?

6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
7.3 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.3 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

References

▼	URL	Tags
	https://vuldb.com/?id.299206	vdb-entry, technical-description
	https://vuldb.com/?ctiid.299206	signature, permissions-required
	https://vuldb.com/?submit.512803	third-party-advisory
	https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf	related
	https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f	patch
	https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44	patch

Impacted products

	Vendor	Product	Version
	n/a	libzvbi	Version: 0.2.0 Version: 0.2.1 Version: 0.2.2 Version: 0.2.3 Version: 0.2.4 Version: 0.2.5 Version: 0.2.6 Version: 0.2.7 Version: 0.2.8 Version: 0.2.9 Version: 0.2.10 Version: 0.2.11 Version: 0.2.12 Version: 0.2.13 Version: 0.2.14 Version: 0.2.15 Version: 0.2.16 Version: 0.2.17 Version: 0.2.18 Version: 0.2.19 Version: 0.2.20 Version: 0.2.21 Version: 0.2.22 Version: 0.2.23 Version: 0.2.24 Version: 0.2.25 Version: 0.2.26 Version: 0.2.27 Version: 0.2.28 Version: 0.2.29 Version: 0.2.30 Version: 0.2.31 Version: 0.2.32 Version: 0.2.33 Version: 0.2.34 Version: 0.2.35 Version: 0.2.36 Version: 0.2.37 Version: 0.2.38 Version: 0.2.39 Version: 0.2.40 Version: 0.2.41 Version: 0.2.42 Version: 0.2.43

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-2177",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-03-11T14:11:11.307650Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-11T14:12:36.161Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "libzvbi",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "0.2.0",
                  },
                  {
                     status: "affected",
                     version: "0.2.1",
                  },
                  {
                     status: "affected",
                     version: "0.2.2",
                  },
                  {
                     status: "affected",
                     version: "0.2.3",
                  },
                  {
                     status: "affected",
                     version: "0.2.4",
                  },
                  {
                     status: "affected",
                     version: "0.2.5",
                  },
                  {
                     status: "affected",
                     version: "0.2.6",
                  },
                  {
                     status: "affected",
                     version: "0.2.7",
                  },
                  {
                     status: "affected",
                     version: "0.2.8",
                  },
                  {
                     status: "affected",
                     version: "0.2.9",
                  },
                  {
                     status: "affected",
                     version: "0.2.10",
                  },
                  {
                     status: "affected",
                     version: "0.2.11",
                  },
                  {
                     status: "affected",
                     version: "0.2.12",
                  },
                  {
                     status: "affected",
                     version: "0.2.13",
                  },
                  {
                     status: "affected",
                     version: "0.2.14",
                  },
                  {
                     status: "affected",
                     version: "0.2.15",
                  },
                  {
                     status: "affected",
                     version: "0.2.16",
                  },
                  {
                     status: "affected",
                     version: "0.2.17",
                  },
                  {
                     status: "affected",
                     version: "0.2.18",
                  },
                  {
                     status: "affected",
                     version: "0.2.19",
                  },
                  {
                     status: "affected",
                     version: "0.2.20",
                  },
                  {
                     status: "affected",
                     version: "0.2.21",
                  },
                  {
                     status: "affected",
                     version: "0.2.22",
                  },
                  {
                     status: "affected",
                     version: "0.2.23",
                  },
                  {
                     status: "affected",
                     version: "0.2.24",
                  },
                  {
                     status: "affected",
                     version: "0.2.25",
                  },
                  {
                     status: "affected",
                     version: "0.2.26",
                  },
                  {
                     status: "affected",
                     version: "0.2.27",
                  },
                  {
                     status: "affected",
                     version: "0.2.28",
                  },
                  {
                     status: "affected",
                     version: "0.2.29",
                  },
                  {
                     status: "affected",
                     version: "0.2.30",
                  },
                  {
                     status: "affected",
                     version: "0.2.31",
                  },
                  {
                     status: "affected",
                     version: "0.2.32",
                  },
                  {
                     status: "affected",
                     version: "0.2.33",
                  },
                  {
                     status: "affected",
                     version: "0.2.34",
                  },
                  {
                     status: "affected",
                     version: "0.2.35",
                  },
                  {
                     status: "affected",
                     version: "0.2.36",
                  },
                  {
                     status: "affected",
                     version: "0.2.37",
                  },
                  {
                     status: "affected",
                     version: "0.2.38",
                  },
                  {
                     status: "affected",
                     version: "0.2.39",
                  },
                  {
                     status: "affected",
                     version: "0.2.40",
                  },
                  {
                     status: "affected",
                     version: "0.2.41",
                  },
                  {
                     status: "affected",
                     version: "0.2.42",
                  },
                  {
                     status: "affected",
                     version: "0.2.43",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "reporter",
               value: "ninpwn (VulDB User)",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
            },
            {
               lang: "de",
               value: "In libzvbi bis 0.2.43 wurde eine Schwachstelle entdeckt. Sie wurde als kritisch eingestuft. Das betrifft die Funktion vbi_search_new der Datei src/search.c. Mittels Manipulieren des Arguments pat_len mit unbekannten Daten kann eine integer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 0.2.44 vermag dieses Problem zu lösen. Der Patch wird als ca1672134b3e2962cd392212c73f44f8f4cb489f bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  baseScore: 6.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
               },
            },
            {
               cvssV3_1: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
            },
            {
               cvssV3_0: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
            {
               cvssV2_0: {
                  baseScore: 7.5,
                  vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                  version: "2.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "Integer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-189",
                     description: "Numeric Error",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T07:31:06.438Z",
            orgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
            shortName: "VulDB",
         },
         references: [
            {
               name: "VDB-299206 | libzvbi search.c vbi_search_new integer overflow",
               tags: [
                  "vdb-entry",
                  "technical-description",
               ],
               url: "https://vuldb.com/?id.299206",
            },
            {
               name: "VDB-299206 | CTI Indicators (IOB, IOC, IOA)",
               tags: [
                  "signature",
                  "permissions-required",
               ],
               url: "https://vuldb.com/?ctiid.299206",
            },
            {
               name: "Submit #512803 | Open Source libzvbi 0.2.43 Integer Overflow -> Heap Overflow (vbi_search_new)",
               tags: [
                  "third-party-advisory",
               ],
               url: "https://vuldb.com/?submit.512803",
            },
            {
               tags: [
                  "related",
               ],
               url: "https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2025-03-11T00:00:00.000Z",
               value: "Advisory disclosed",
            },
            {
               lang: "en",
               time: "2025-03-11T01:00:00.000Z",
               value: "VulDB entry created",
            },
            {
               lang: "en",
               time: "2025-03-11T07:18:12.000Z",
               value: "VulDB entry last update",
            },
         ],
         title: "libzvbi search.c vbi_search_new integer overflow",
      },
   },
   cveMetadata: {
      assignerOrgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
      assignerShortName: "VulDB",
      cveId: "CVE-2025-2177",
      datePublished: "2025-03-11T07:31:06.438Z",
      dateReserved: "2025-03-10T17:27:09.154Z",
      dateUpdated: "2025-03-11T14:12:36.161Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2025-2176 (GCVE-0-2025-2176)

Vulnerability from cvelistv5

Published

2025-03-11 07:31

Modified

2025-03-11 15:21

Severity ?

6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
7.3 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
7.3 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The identifier of the patch is ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

References

▼	URL	Tags
	https://vuldb.com/?id.299205	vdb-entry, technical-description
	https://vuldb.com/?ctiid.299205	signature, permissions-required
	https://vuldb.com/?submit.512802	third-party-advisory
	https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf	related
	https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f	patch
	https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44	patch

Impacted products

	Vendor	Product	Version
	n/a	libzvbi	Version: 0.2.0 Version: 0.2.1 Version: 0.2.2 Version: 0.2.3 Version: 0.2.4 Version: 0.2.5 Version: 0.2.6 Version: 0.2.7 Version: 0.2.8 Version: 0.2.9 Version: 0.2.10 Version: 0.2.11 Version: 0.2.12 Version: 0.2.13 Version: 0.2.14 Version: 0.2.15 Version: 0.2.16 Version: 0.2.17 Version: 0.2.18 Version: 0.2.19 Version: 0.2.20 Version: 0.2.21 Version: 0.2.22 Version: 0.2.23 Version: 0.2.24 Version: 0.2.25 Version: 0.2.26 Version: 0.2.27 Version: 0.2.28 Version: 0.2.29 Version: 0.2.30 Version: 0.2.31 Version: 0.2.32 Version: 0.2.33 Version: 0.2.34 Version: 0.2.35 Version: 0.2.36 Version: 0.2.37 Version: 0.2.38 Version: 0.2.39 Version: 0.2.40 Version: 0.2.41 Version: 0.2.42 Version: 0.2.43

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-2176",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-03-11T15:14:23.195210Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-11T15:21:26.833Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "libzvbi",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "0.2.0",
                  },
                  {
                     status: "affected",
                     version: "0.2.1",
                  },
                  {
                     status: "affected",
                     version: "0.2.2",
                  },
                  {
                     status: "affected",
                     version: "0.2.3",
                  },
                  {
                     status: "affected",
                     version: "0.2.4",
                  },
                  {
                     status: "affected",
                     version: "0.2.5",
                  },
                  {
                     status: "affected",
                     version: "0.2.6",
                  },
                  {
                     status: "affected",
                     version: "0.2.7",
                  },
                  {
                     status: "affected",
                     version: "0.2.8",
                  },
                  {
                     status: "affected",
                     version: "0.2.9",
                  },
                  {
                     status: "affected",
                     version: "0.2.10",
                  },
                  {
                     status: "affected",
                     version: "0.2.11",
                  },
                  {
                     status: "affected",
                     version: "0.2.12",
                  },
                  {
                     status: "affected",
                     version: "0.2.13",
                  },
                  {
                     status: "affected",
                     version: "0.2.14",
                  },
                  {
                     status: "affected",
                     version: "0.2.15",
                  },
                  {
                     status: "affected",
                     version: "0.2.16",
                  },
                  {
                     status: "affected",
                     version: "0.2.17",
                  },
                  {
                     status: "affected",
                     version: "0.2.18",
                  },
                  {
                     status: "affected",
                     version: "0.2.19",
                  },
                  {
                     status: "affected",
                     version: "0.2.20",
                  },
                  {
                     status: "affected",
                     version: "0.2.21",
                  },
                  {
                     status: "affected",
                     version: "0.2.22",
                  },
                  {
                     status: "affected",
                     version: "0.2.23",
                  },
                  {
                     status: "affected",
                     version: "0.2.24",
                  },
                  {
                     status: "affected",
                     version: "0.2.25",
                  },
                  {
                     status: "affected",
                     version: "0.2.26",
                  },
                  {
                     status: "affected",
                     version: "0.2.27",
                  },
                  {
                     status: "affected",
                     version: "0.2.28",
                  },
                  {
                     status: "affected",
                     version: "0.2.29",
                  },
                  {
                     status: "affected",
                     version: "0.2.30",
                  },
                  {
                     status: "affected",
                     version: "0.2.31",
                  },
                  {
                     status: "affected",
                     version: "0.2.32",
                  },
                  {
                     status: "affected",
                     version: "0.2.33",
                  },
                  {
                     status: "affected",
                     version: "0.2.34",
                  },
                  {
                     status: "affected",
                     version: "0.2.35",
                  },
                  {
                     status: "affected",
                     version: "0.2.36",
                  },
                  {
                     status: "affected",
                     version: "0.2.37",
                  },
                  {
                     status: "affected",
                     version: "0.2.38",
                  },
                  {
                     status: "affected",
                     version: "0.2.39",
                  },
                  {
                     status: "affected",
                     version: "0.2.40",
                  },
                  {
                     status: "affected",
                     version: "0.2.41",
                  },
                  {
                     status: "affected",
                     version: "0.2.42",
                  },
                  {
                     status: "affected",
                     version: "0.2.43",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "Yariv Nedivi",
            },
            {
               lang: "en",
               type: "reporter",
               value: "ninpwn (VulDB User)",
            },
            {
               lang: "en",
               type: "analyst",
               value: "ninpwn (VulDB User)",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbi_capture_sim_load_caption of the file src/io-sim.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The identifier of the patch is ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
            },
            {
               lang: "de",
               value: "Es wurde eine Schwachstelle in libzvbi bis 0.2.43 entdeckt. Sie wurde als kritisch eingestuft. Es betrifft die Funktion vbi_capture_sim_load_caption der Datei src/io-sim.c. Mittels dem Manipulieren mit unbekannten Daten kann eine integer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 0.2.44 vermag dieses Problem zu lösen. Der Patch wird als ca1672134b3e2962cd392212c73f44f8f4cb489f bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  baseScore: 6.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
               },
            },
            {
               cvssV3_1: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
            },
            {
               cvssV3_0: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
            {
               cvssV2_0: {
                  baseScore: 7.5,
                  vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
                  version: "2.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "Integer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-189",
                     description: "Numeric Error",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T08:02:38.128Z",
            orgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
            shortName: "VulDB",
         },
         references: [
            {
               name: "VDB-299205 | libzvbi io-sim.c vbi_capture_sim_load_caption integer overflow",
               tags: [
                  "vdb-entry",
                  "technical-description",
               ],
               url: "https://vuldb.com/?id.299205",
            },
            {
               name: "VDB-299205 | CTI Indicators (IOB, IOC, IOA)",
               tags: [
                  "signature",
                  "permissions-required",
               ],
               url: "https://vuldb.com/?ctiid.299205",
            },
            {
               name: "Submit #512802 | Open Source libzvbi 0.2.43 Integer Overflow -> Heap Overflow (vbi_capture_sim_load_caption)",
               tags: [
                  "third-party-advisory",
               ],
               url: "https://vuldb.com/?submit.512802",
            },
            {
               tags: [
                  "related",
               ],
               url: "https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2025-03-11T00:00:00.000Z",
               value: "Advisory disclosed",
            },
            {
               lang: "en",
               time: "2025-03-11T01:00:00.000Z",
               value: "VulDB entry created",
            },
            {
               lang: "en",
               time: "2025-03-11T09:04:06.000Z",
               value: "VulDB entry last update",
            },
         ],
         title: "libzvbi io-sim.c vbi_capture_sim_load_caption integer overflow",
      },
   },
   cveMetadata: {
      assignerOrgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
      assignerShortName: "VulDB",
      cveId: "CVE-2025-2176",
      datePublished: "2025-03-11T07:31:05.090Z",
      dateReserved: "2025-03-10T17:27:04.908Z",
      dateUpdated: "2025-03-11T15:21:26.833Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2025-2173 (GCVE-0-2025-2173)

Vulnerability from cvelistv5

Published

2025-03-11 06:31

Modified

2025-03-11 13:47

Severity ?

6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
5.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Summary

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

References

▼	URL	Tags
	https://vuldb.com/?id.299202	vdb-entry, technical-description
	https://vuldb.com/?ctiid.299202	signature, permissions-required
	https://vuldb.com/?submit.512798	third-party-advisory
	https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf	related
	https://github.com/zapping-vbi/zvbi/commit/8def647eea27f7fd7ad33ff79c2d6d3e39948dce	patch
	https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44	patch

Impacted products

	Vendor	Product	Version
	n/a	libzvbi	Version: 0.2.0 Version: 0.2.1 Version: 0.2.2 Version: 0.2.3 Version: 0.2.4 Version: 0.2.5 Version: 0.2.6 Version: 0.2.7 Version: 0.2.8 Version: 0.2.9 Version: 0.2.10 Version: 0.2.11 Version: 0.2.12 Version: 0.2.13 Version: 0.2.14 Version: 0.2.15 Version: 0.2.16 Version: 0.2.17 Version: 0.2.18 Version: 0.2.19 Version: 0.2.20 Version: 0.2.21 Version: 0.2.22 Version: 0.2.23 Version: 0.2.24 Version: 0.2.25 Version: 0.2.26 Version: 0.2.27 Version: 0.2.28 Version: 0.2.29 Version: 0.2.30 Version: 0.2.31 Version: 0.2.32 Version: 0.2.33 Version: 0.2.34 Version: 0.2.35 Version: 0.2.36 Version: 0.2.37 Version: 0.2.38 Version: 0.2.39 Version: 0.2.40 Version: 0.2.41 Version: 0.2.42 Version: 0.2.43

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-2173",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-03-11T13:46:53.127947Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-11T13:47:03.081Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "libzvbi",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "0.2.0",
                  },
                  {
                     status: "affected",
                     version: "0.2.1",
                  },
                  {
                     status: "affected",
                     version: "0.2.2",
                  },
                  {
                     status: "affected",
                     version: "0.2.3",
                  },
                  {
                     status: "affected",
                     version: "0.2.4",
                  },
                  {
                     status: "affected",
                     version: "0.2.5",
                  },
                  {
                     status: "affected",
                     version: "0.2.6",
                  },
                  {
                     status: "affected",
                     version: "0.2.7",
                  },
                  {
                     status: "affected",
                     version: "0.2.8",
                  },
                  {
                     status: "affected",
                     version: "0.2.9",
                  },
                  {
                     status: "affected",
                     version: "0.2.10",
                  },
                  {
                     status: "affected",
                     version: "0.2.11",
                  },
                  {
                     status: "affected",
                     version: "0.2.12",
                  },
                  {
                     status: "affected",
                     version: "0.2.13",
                  },
                  {
                     status: "affected",
                     version: "0.2.14",
                  },
                  {
                     status: "affected",
                     version: "0.2.15",
                  },
                  {
                     status: "affected",
                     version: "0.2.16",
                  },
                  {
                     status: "affected",
                     version: "0.2.17",
                  },
                  {
                     status: "affected",
                     version: "0.2.18",
                  },
                  {
                     status: "affected",
                     version: "0.2.19",
                  },
                  {
                     status: "affected",
                     version: "0.2.20",
                  },
                  {
                     status: "affected",
                     version: "0.2.21",
                  },
                  {
                     status: "affected",
                     version: "0.2.22",
                  },
                  {
                     status: "affected",
                     version: "0.2.23",
                  },
                  {
                     status: "affected",
                     version: "0.2.24",
                  },
                  {
                     status: "affected",
                     version: "0.2.25",
                  },
                  {
                     status: "affected",
                     version: "0.2.26",
                  },
                  {
                     status: "affected",
                     version: "0.2.27",
                  },
                  {
                     status: "affected",
                     version: "0.2.28",
                  },
                  {
                     status: "affected",
                     version: "0.2.29",
                  },
                  {
                     status: "affected",
                     version: "0.2.30",
                  },
                  {
                     status: "affected",
                     version: "0.2.31",
                  },
                  {
                     status: "affected",
                     version: "0.2.32",
                  },
                  {
                     status: "affected",
                     version: "0.2.33",
                  },
                  {
                     status: "affected",
                     version: "0.2.34",
                  },
                  {
                     status: "affected",
                     version: "0.2.35",
                  },
                  {
                     status: "affected",
                     version: "0.2.36",
                  },
                  {
                     status: "affected",
                     version: "0.2.37",
                  },
                  {
                     status: "affected",
                     version: "0.2.38",
                  },
                  {
                     status: "affected",
                     version: "0.2.39",
                  },
                  {
                     status: "affected",
                     version: "0.2.40",
                  },
                  {
                     status: "affected",
                     version: "0.2.41",
                  },
                  {
                     status: "affected",
                     version: "0.2.42",
                  },
                  {
                     status: "affected",
                     version: "0.2.43",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "reporter",
               value: "ninpwn (VulDB User)",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as 8def647eea27f7fd7ad33ff79c2d6d3e39948dce. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
            },
            {
               lang: "de",
               value: "Es wurde eine problematische Schwachstelle in libzvbi bis 0.2.43 ausgemacht. Es geht dabei um die Funktion vbi_strndup_iconv_ucs2 der Datei src/conv.c. Mit der Manipulation des Arguments src_length mit unbekannten Daten kann eine uninitialized pointer-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 0.2.44 vermag dieses Problem zu lösen. Der Patch wird als 8def647eea27f7fd7ad33ff79c2d6d3e39948dce bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  baseScore: 6.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                  version: "4.0",
               },
            },
            {
               cvssV3_1: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
            },
            {
               cvssV3_0: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.0",
               },
            },
            {
               cvssV2_0: {
                  baseScore: 5,
                  vectorString: "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                  version: "2.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-824",
                     description: "Uninitialized Pointer",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-908",
                     description: "Uninitialized Resource",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T06:31:05.166Z",
            orgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
            shortName: "VulDB",
         },
         references: [
            {
               name: "VDB-299202 | libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer",
               tags: [
                  "vdb-entry",
                  "technical-description",
               ],
               url: "https://vuldb.com/?id.299202",
            },
            {
               name: "VDB-299202 | CTI Indicators (IOB, IOC, IOA)",
               tags: [
                  "signature",
                  "permissions-required",
               ],
               url: "https://vuldb.com/?ctiid.299202",
            },
            {
               name: "Submit #512798 | Open Source libzvbi 0.2.43 Unitinialized Heap Read",
               tags: [
                  "third-party-advisory",
               ],
               url: "https://vuldb.com/?submit.512798",
            },
            {
               tags: [
                  "related",
               ],
               url: "https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/commit/8def647eea27f7fd7ad33ff79c2d6d3e39948dce",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2025-03-11T00:00:00.000Z",
               value: "Advisory disclosed",
            },
            {
               lang: "en",
               time: "2025-03-11T01:00:00.000Z",
               value: "VulDB entry created",
            },
            {
               lang: "en",
               time: "2025-03-11T07:18:06.000Z",
               value: "VulDB entry last update",
            },
         ],
         title: "libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer",
      },
   },
   cveMetadata: {
      assignerOrgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
      assignerShortName: "VulDB",
      cveId: "CVE-2025-2173",
      datePublished: "2025-03-11T06:31:05.166Z",
      dateReserved: "2025-03-10T17:26:53.636Z",
      dateUpdated: "2025-03-11T13:47:03.081Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2025-2175 (GCVE-0-2025-2175)

Vulnerability from cvelistv5

Published

2025-03-11 07:00

Modified

2025-03-11 17:13

Severity ?

5.3 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
4.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Summary

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

References

▼	URL	Tags
	https://vuldb.com/?id.299204	vdb-entry, technical-description
	https://vuldb.com/?ctiid.299204	signature, permissions-required
	https://vuldb.com/?submit.512801	third-party-advisory
	https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf	related
	https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44	patch

Impacted products

	Vendor	Product	Version
	n/a	libzvbi	Version: 0.2.0 Version: 0.2.1 Version: 0.2.2 Version: 0.2.3 Version: 0.2.4 Version: 0.2.5 Version: 0.2.6 Version: 0.2.7 Version: 0.2.8 Version: 0.2.9 Version: 0.2.10 Version: 0.2.11 Version: 0.2.12 Version: 0.2.13 Version: 0.2.14 Version: 0.2.15 Version: 0.2.16 Version: 0.2.17 Version: 0.2.18 Version: 0.2.19 Version: 0.2.20 Version: 0.2.21 Version: 0.2.22 Version: 0.2.23 Version: 0.2.24 Version: 0.2.25 Version: 0.2.26 Version: 0.2.27 Version: 0.2.28 Version: 0.2.29 Version: 0.2.30 Version: 0.2.31 Version: 0.2.32 Version: 0.2.33 Version: 0.2.34 Version: 0.2.35 Version: 0.2.36 Version: 0.2.37 Version: 0.2.38 Version: 0.2.39 Version: 0.2.40 Version: 0.2.41 Version: 0.2.42 Version: 0.2.43

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-2175",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-03-11T17:11:46.051145Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-11T17:13:11.689Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "libzvbi",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "0.2.0",
                  },
                  {
                     status: "affected",
                     version: "0.2.1",
                  },
                  {
                     status: "affected",
                     version: "0.2.2",
                  },
                  {
                     status: "affected",
                     version: "0.2.3",
                  },
                  {
                     status: "affected",
                     version: "0.2.4",
                  },
                  {
                     status: "affected",
                     version: "0.2.5",
                  },
                  {
                     status: "affected",
                     version: "0.2.6",
                  },
                  {
                     status: "affected",
                     version: "0.2.7",
                  },
                  {
                     status: "affected",
                     version: "0.2.8",
                  },
                  {
                     status: "affected",
                     version: "0.2.9",
                  },
                  {
                     status: "affected",
                     version: "0.2.10",
                  },
                  {
                     status: "affected",
                     version: "0.2.11",
                  },
                  {
                     status: "affected",
                     version: "0.2.12",
                  },
                  {
                     status: "affected",
                     version: "0.2.13",
                  },
                  {
                     status: "affected",
                     version: "0.2.14",
                  },
                  {
                     status: "affected",
                     version: "0.2.15",
                  },
                  {
                     status: "affected",
                     version: "0.2.16",
                  },
                  {
                     status: "affected",
                     version: "0.2.17",
                  },
                  {
                     status: "affected",
                     version: "0.2.18",
                  },
                  {
                     status: "affected",
                     version: "0.2.19",
                  },
                  {
                     status: "affected",
                     version: "0.2.20",
                  },
                  {
                     status: "affected",
                     version: "0.2.21",
                  },
                  {
                     status: "affected",
                     version: "0.2.22",
                  },
                  {
                     status: "affected",
                     version: "0.2.23",
                  },
                  {
                     status: "affected",
                     version: "0.2.24",
                  },
                  {
                     status: "affected",
                     version: "0.2.25",
                  },
                  {
                     status: "affected",
                     version: "0.2.26",
                  },
                  {
                     status: "affected",
                     version: "0.2.27",
                  },
                  {
                     status: "affected",
                     version: "0.2.28",
                  },
                  {
                     status: "affected",
                     version: "0.2.29",
                  },
                  {
                     status: "affected",
                     version: "0.2.30",
                  },
                  {
                     status: "affected",
                     version: "0.2.31",
                  },
                  {
                     status: "affected",
                     version: "0.2.32",
                  },
                  {
                     status: "affected",
                     version: "0.2.33",
                  },
                  {
                     status: "affected",
                     version: "0.2.34",
                  },
                  {
                     status: "affected",
                     version: "0.2.35",
                  },
                  {
                     status: "affected",
                     version: "0.2.36",
                  },
                  {
                     status: "affected",
                     version: "0.2.37",
                  },
                  {
                     status: "affected",
                     version: "0.2.38",
                  },
                  {
                     status: "affected",
                     version: "0.2.39",
                  },
                  {
                     status: "affected",
                     version: "0.2.40",
                  },
                  {
                     status: "affected",
                     version: "0.2.41",
                  },
                  {
                     status: "affected",
                     version: "0.2.42",
                  },
                  {
                     status: "affected",
                     version: "0.2.43",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "Yariv Nedivi",
            },
            {
               lang: "en",
               type: "reporter",
               value: "ninpwn (VulDB User)",
            },
            {
               lang: "en",
               type: "analyst",
               value: "ninpwn (VulDB User)",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function _vbi_strndup_iconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
            },
            {
               lang: "de",
               value: "Eine problematische Schwachstelle wurde in libzvbi bis 0.2.43 ausgemacht. Hierbei geht es um die Funktion _vbi_strndup_iconv. Durch Manipulation mit unbekannten Daten kann eine integer overflow-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 0.2.44 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
               },
            },
            {
               cvssV3_1: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
            },
            {
               cvssV3_0: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
            },
            {
               cvssV2_0: {
                  baseScore: 5,
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "Integer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-189",
                     description: "Numeric Error",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T08:02:36.691Z",
            orgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
            shortName: "VulDB",
         },
         references: [
            {
               name: "VDB-299204 | libzvbi _vbi_strndup_iconv integer overflow",
               tags: [
                  "vdb-entry",
                  "technical-description",
               ],
               url: "https://vuldb.com/?id.299204",
            },
            {
               name: "VDB-299204 | CTI Indicators (IOB, IOC, IOA)",
               tags: [
                  "signature",
                  "permissions-required",
               ],
               url: "https://vuldb.com/?ctiid.299204",
            },
            {
               name: "Submit #512801 | Open Source libzvbi 0.2.43 Integer Overflow -> Heap Overflow (_vbi_strndup_iconv)",
               tags: [
                  "third-party-advisory",
               ],
               url: "https://vuldb.com/?submit.512801",
            },
            {
               tags: [
                  "related",
               ],
               url: "https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2025-03-11T00:00:00.000Z",
               value: "Advisory disclosed",
            },
            {
               lang: "en",
               time: "2025-03-11T01:00:00.000Z",
               value: "VulDB entry created",
            },
            {
               lang: "en",
               time: "2025-03-11T09:03:59.000Z",
               value: "VulDB entry last update",
            },
         ],
         title: "libzvbi _vbi_strndup_iconv integer overflow",
      },
   },
   cveMetadata: {
      assignerOrgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
      assignerShortName: "VulDB",
      cveId: "CVE-2025-2175",
      datePublished: "2025-03-11T07:00:09.753Z",
      dateReserved: "2025-03-10T17:27:00.680Z",
      dateUpdated: "2025-03-11T17:13:11.689Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

CVE-2025-2174 (GCVE-0-2025-2174)

Vulnerability from cvelistv5

Published

2025-03-11 06:31

Modified

2025-03-11 13:40

Severity ?

6.9 (Medium) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Summary

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to integer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is named ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

References

▼	URL	Tags
	https://vuldb.com/?id.299203	vdb-entry, technical-description
	https://vuldb.com/?ctiid.299203	signature, permissions-required
	https://vuldb.com/?submit.512800	third-party-advisory
	https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf	related
	https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f	patch
	https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44	patch

Impacted products

	Vendor	Product	Version
	n/a	libzvbi	Version: 0.2.0 Version: 0.2.1 Version: 0.2.2 Version: 0.2.3 Version: 0.2.4 Version: 0.2.5 Version: 0.2.6 Version: 0.2.7 Version: 0.2.8 Version: 0.2.9 Version: 0.2.10 Version: 0.2.11 Version: 0.2.12 Version: 0.2.13 Version: 0.2.14 Version: 0.2.15 Version: 0.2.16 Version: 0.2.17 Version: 0.2.18 Version: 0.2.19 Version: 0.2.20 Version: 0.2.21 Version: 0.2.22 Version: 0.2.23 Version: 0.2.24 Version: 0.2.25 Version: 0.2.26 Version: 0.2.27 Version: 0.2.28 Version: 0.2.29 Version: 0.2.30 Version: 0.2.31 Version: 0.2.32 Version: 0.2.33 Version: 0.2.34 Version: 0.2.35 Version: 0.2.36 Version: 0.2.37 Version: 0.2.38 Version: 0.2.39 Version: 0.2.40 Version: 0.2.41 Version: 0.2.42 Version: 0.2.43

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2025-2174",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-03-11T13:25:13.046485Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-11T13:40:54.884Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "libzvbi",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "0.2.0",
                  },
                  {
                     status: "affected",
                     version: "0.2.1",
                  },
                  {
                     status: "affected",
                     version: "0.2.2",
                  },
                  {
                     status: "affected",
                     version: "0.2.3",
                  },
                  {
                     status: "affected",
                     version: "0.2.4",
                  },
                  {
                     status: "affected",
                     version: "0.2.5",
                  },
                  {
                     status: "affected",
                     version: "0.2.6",
                  },
                  {
                     status: "affected",
                     version: "0.2.7",
                  },
                  {
                     status: "affected",
                     version: "0.2.8",
                  },
                  {
                     status: "affected",
                     version: "0.2.9",
                  },
                  {
                     status: "affected",
                     version: "0.2.10",
                  },
                  {
                     status: "affected",
                     version: "0.2.11",
                  },
                  {
                     status: "affected",
                     version: "0.2.12",
                  },
                  {
                     status: "affected",
                     version: "0.2.13",
                  },
                  {
                     status: "affected",
                     version: "0.2.14",
                  },
                  {
                     status: "affected",
                     version: "0.2.15",
                  },
                  {
                     status: "affected",
                     version: "0.2.16",
                  },
                  {
                     status: "affected",
                     version: "0.2.17",
                  },
                  {
                     status: "affected",
                     version: "0.2.18",
                  },
                  {
                     status: "affected",
                     version: "0.2.19",
                  },
                  {
                     status: "affected",
                     version: "0.2.20",
                  },
                  {
                     status: "affected",
                     version: "0.2.21",
                  },
                  {
                     status: "affected",
                     version: "0.2.22",
                  },
                  {
                     status: "affected",
                     version: "0.2.23",
                  },
                  {
                     status: "affected",
                     version: "0.2.24",
                  },
                  {
                     status: "affected",
                     version: "0.2.25",
                  },
                  {
                     status: "affected",
                     version: "0.2.26",
                  },
                  {
                     status: "affected",
                     version: "0.2.27",
                  },
                  {
                     status: "affected",
                     version: "0.2.28",
                  },
                  {
                     status: "affected",
                     version: "0.2.29",
                  },
                  {
                     status: "affected",
                     version: "0.2.30",
                  },
                  {
                     status: "affected",
                     version: "0.2.31",
                  },
                  {
                     status: "affected",
                     version: "0.2.32",
                  },
                  {
                     status: "affected",
                     version: "0.2.33",
                  },
                  {
                     status: "affected",
                     version: "0.2.34",
                  },
                  {
                     status: "affected",
                     version: "0.2.35",
                  },
                  {
                     status: "affected",
                     version: "0.2.36",
                  },
                  {
                     status: "affected",
                     version: "0.2.37",
                  },
                  {
                     status: "affected",
                     version: "0.2.38",
                  },
                  {
                     status: "affected",
                     version: "0.2.39",
                  },
                  {
                     status: "affected",
                     version: "0.2.40",
                  },
                  {
                     status: "affected",
                     version: "0.2.41",
                  },
                  {
                     status: "affected",
                     version: "0.2.42",
                  },
                  {
                     status: "affected",
                     version: "0.2.43",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               type: "finder",
               value: "Yariv Nedivi",
            },
            {
               lang: "en",
               type: "reporter",
               value: "ninpwn (VulDB User)",
            },
            {
               lang: "en",
               type: "analyst",
               value: "ninpwn (VulDB User)",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbi_strndup_iconv_ucs2 of the file src/conv.c. The manipulation of the argument src_length leads to integer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is named ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.",
            },
            {
               lang: "de",
               value: "In libzvbi bis 0.2.43 wurde eine problematische Schwachstelle ausgemacht. Dabei geht es um die Funktion vbi_strndup_iconv_ucs2 der Datei src/conv.c. Durch die Manipulation des Arguments src_length mit unbekannten Daten kann eine integer overflow-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 0.2.44 vermag dieses Problem zu lösen. Der Patch wird als ca1672134b3e2962cd392212c73f44f8f4cb489f bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.",
            },
         ],
         metrics: [
            {
               cvssV4_0: {
                  baseScore: 6.9,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
                  version: "4.0",
               },
            },
            {
               cvssV3_1: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
            },
            {
               cvssV3_0: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
            },
            {
               cvssV2_0: {
                  baseScore: 5,
                  vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                  version: "2.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "Integer Overflow",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
            {
               descriptions: [
                  {
                     cweId: "CWE-189",
                     description: "Numeric Error",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2025-03-11T08:02:35.278Z",
            orgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
            shortName: "VulDB",
         },
         references: [
            {
               name: "VDB-299203 | libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow",
               tags: [
                  "vdb-entry",
                  "technical-description",
               ],
               url: "https://vuldb.com/?id.299203",
            },
            {
               name: "VDB-299203 | CTI Indicators (IOB, IOC, IOA)",
               tags: [
                  "signature",
                  "permissions-required",
               ],
               url: "https://vuldb.com/?ctiid.299203",
            },
            {
               name: "Submit #512800 | Open Source libzvbi 0.2.43 Integer Overflow -> Heap Overflow",
               tags: [
                  "third-party-advisory",
               ],
               url: "https://vuldb.com/?submit.512800",
            },
            {
               tags: [
                  "related",
               ],
               url: "https://github.com/zapping-vbi/zvbi/security/advisories/GHSA-g7cg-7gw9-v8cf",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/commit/ca1672134b3e2962cd392212c73f44f8f4cb489f",
            },
            {
               tags: [
                  "patch",
               ],
               url: "https://github.com/zapping-vbi/zvbi/releases/tag/v0.2.44",
            },
         ],
         timeline: [
            {
               lang: "en",
               time: "2025-03-11T00:00:00.000Z",
               value: "Advisory disclosed",
            },
            {
               lang: "en",
               time: "2025-03-11T01:00:00.000Z",
               value: "VulDB entry created",
            },
            {
               lang: "en",
               time: "2025-03-11T09:03:47.000Z",
               value: "VulDB entry last update",
            },
         ],
         title: "libzvbi conv.c vbi_strndup_iconv_ucs2 integer overflow",
      },
   },
   cveMetadata: {
      assignerOrgId: "1af790b2-7ee1-4545-860a-a788eba489b5",
      assignerShortName: "VulDB",
      cveId: "CVE-2025-2174",
      datePublished: "2025-03-11T06:31:06.971Z",
      dateReserved: "2025-03-10T17:26:56.285Z",
      dateUpdated: "2025-03-11T13:40:54.884Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

CVE-2025-2177 (GCVE-0-2025-2177)

Vulnerability from cvelistv5

CVE-2025-2176 (GCVE-0-2025-2176)

Vulnerability from cvelistv5

CVE-2025-2173 (GCVE-0-2025-2173)

Vulnerability from cvelistv5

CVE-2025-2175 (GCVE-0-2025-2175)

Vulnerability from cvelistv5

CVE-2025-2174 (GCVE-0-2025-2174)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature