CVE-2025-5462
published 2025-08-12CVE-2025-5462: A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723…
PriorityP347high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
1.14%
65.2th percentile
A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ivanti | connect_secure | < 22.7 | 22.7 |
| ivanti | connect_secure | — | — |
| ivanti | neurons_for_secure_access | < 22.8 | 22.8 |
| ivanti | neurons_for_secure_access | — | — |
| ivanti | policy_secure | < 22.7 | 22.7 |
| ivanti | policy_secure | — | — |
| ivanti | zero_trust_access_gateway | — | — |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-ph7j-5qgh-2m7f: A heap-based buffer overflow in Ivanti Connect Secure before 22
ghsa_unreviewed·2025-08-12
CVE-2025-5462 [HIGH] CWE-122 GHSA-ph7j-5qgh-2m7f: A heap-based buffer overflow in Ivanti Connect Secure before 22
A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.
Ivanti
Ivanti Security Advisory: CVE-2025-5462
vendor_ivanti·2025-08-12·CVSS 7.5
CVE-2025-5462 [HIGH] CWE-122 Ivanti Security Advisory: CVE-2025-5462
Ivanti Security Advisory: CVE-2025-5462
A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote unauthenticated attacker to trigger a denial of service.
CVE IDs: CVE-2025-5462
CVSS Base Score: 7.5
Severity: HIGH
CWEs: CWE-122
Red Hat
kernel: net: let net.core.dev_weight always be non-zero
vendor_redhat·2025-02-27·CVSS 5.5
CVE-2025-21806 [MEDIUM] CWE-20 kernel: net: let net.core.dev_weight always be non-zero
kernel: net: let net.core.dev_weight always be non-zero
In the Linux kernel, the following vulnerability has been resolved:
net: let net.core.dev_weight always be non-zero
The following problem was encountered during stability test:
(NULL net_device): NAPI poll function process_backlog+0x0/0x530 \
returned 1, exceeding its budget of 0.
------------[ cut here ]------------
list_add double add: new=ffff88905f746f48, prev=ffff88905f746f48, \
next=ffff88905f746e40.
WARNING: CPU: 18 PID: 5462 at lib/list_debug.c:35 \
__list_add_valid_or_report+0xf3/0x130
CPU: 18 UID: 0 PID: 5462 Comm: ping Kdump: loaded Not tainted 6.13.0-rc7+
RIP: 0010:__list_add_valid_or_report+0xf3/0x130
Call Trace:
? __warn+0xcd/0x250
? __list_add_valid_or_report+0xf3/0x130
enqueue_to_backlog+0x923/0x1070
netif_rx_internal
No detection rules found.
No public exploits indexed.
2025-08-12
Published