Bug 2339460 (CVE-2025-0395)

Summary:	CVE-2025-0395 glibc: buffer overflow in the GNU C Library's assert()
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	ashankar, codonell, dj, fweimer, pfrankli
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in the GNU C Library (glibc). A buffer overflow condition via the `assert()` function may be triggered due to glibc not allocating enough space for the assertion failure message string and size information. In certain conditions, a local attacker can exploit this, potentially leading to an application crash or other undefined behavior.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2341630, 2341631
Bug Blocks:

Description OSIDB Bzimport 2025-01-22 14:01:09 UTC

When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.

Comment 3 errata-xmlrpc 2025-04-14 01:22:44 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:3828 https://access.redhat.com/errata/RHSA-2025:3828

Comment 4 errata-xmlrpc 2025-04-28 10:02:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:4242 https://access.redhat.com/errata/RHSA-2025:4242

Comment 5 errata-xmlrpc 2025-04-28 10:03:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:4243 https://access.redhat.com/errata/RHSA-2025:4243

Comment 6 errata-xmlrpc 2025-04-28 10:15:57 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:4241 https://access.redhat.com/errata/RHSA-2025:4241

Comment 7 errata-xmlrpc 2025-04-28 11:06:36 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:4244 https://access.redhat.com/errata/RHSA-2025:4244