CVE-2025-2177

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-2177
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2177.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-2177
Aliases
Downstream
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (1)
ROOT (1)
SUSE (2)
UBUNTU (1)
Related
openSUSE (1)
SUSE (2)
Published
2025-03-11T07:31:06Z
Modified
2026-10-21T02:52:13Z
Severity
  • 6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
libzvbi search.c vbi_search_new integer overflow
Details

A vulnerability classified as critical was found in libzvbi up to 0.2.43. This vulnerability affects the function vbi_search_new of the file src/search.c. The manipulation of the argument pat_len leads to integer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.2.44 is able to address this issue. The patch is identified as ca1672134b3e2962cd392212c73f44f8f4cb489f. It is recommended to upgrade the affected component. The code maintainer was informed beforehand about the issues. She reacted very fast and highly professional.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-189",
        "CWE-190"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2177.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "0.2.0"
                        },
                        {
                            "last_affected":  "0.2.0"
                        },
                        {
                            "introduced":  "0.2.1"
                        },
                        {
                            "last_affected":  "0.2.1"
                        },
                        {
                            "introduced":  "0.2.2"
                        },
                        {
                            "last_affected":  "0.2.2"
                        },
                        {
                            "introduced":  "0.2.3"
                        },
                        {
                            "last_affected":  "0.2.3"
                        },
                        {
                            "introduced":  "0.2.4"
                        },
                        {
                            "last_affected":  "0.2.4"
                        },
                        {
                            "introduced":  "0.2.5"
                        },
                        {
                            "last_affected":  "0.2.5"
                        },
                        {
                            "introduced":  "0.2.6"
                        },
                        {
                            "last_affected":  "0.2.6"
                        },
                        {
                            "introduced":  "0.2.7"
                        },
                        {
                            "last_affected":  "0.2.7"
                        },
                        {
                            "introduced":  "0.2.8"
                        },
                        {
                            "last_affected":  "0.2.8"
                        },
                        {
                            "introduced":  "0.2.9"
                        },
                        {
                            "last_affected":  "0.2.9"
                        },
                        {
                            "introduced":  "0.2.10"
                        },
                        {
                            "last_affected":  "0.2.10"
                        },
                        {
                            "introduced":  "0.2.11"
                        },
                        {
                            "last_affected":  "0.2.11"
                        },
                        {
                            "introduced":  "0.2.12"
                        },
                        {
                            "last_affected":  "0.2.12"
                        },
                        {
                            "introduced":  "0.2.13"
                        },
                        {
                            "last_affected":  "0.2.13"
                        },
                        {
                            "introduced":  "0.2.14"
                        },
                        {
                            "last_affected":  "0.2.14"
                        },
                        {
                            "introduced":  "0.2.15"
                        },
                        {
                            "last_affected":  "0.2.15"
                        },
                        {
                            "introduced":  "0.2.16"
                        },
                        {
                            "last_affected":  "0.2.16"
                        },
                        {
                            "introduced":  "0.2.17"
                        },
                        {
                            "last_affected":  "0.2.17"
                        },
                        {
                            "introduced":  "0.2.18"
                        },
                        {
                            "last_affected":  "0.2.18"
                        },
                        {
                            "introduced":  "0.2.19"
                        },
                        {
                            "last_affected":  "0.2.19"
                        },
                        {
                            "introduced":  "0.2.20"
                        },
                        {
                            "last_affected":  "0.2.20"
                        },
                        {
                            "introduced":  "0.2.21"
                        },
                        {
                            "last_affected":  "0.2.21"
                        },
                        {
                            "introduced":  "0.2.22"
                        },
                        {
                            "last_affected":  "0.2.22"
                        },
                        {
                            "introduced":  "0.2.23"
                        },
                        {
                            "last_affected":  "0.2.23"
                        },
                        {
                            "introduced":  "0.2.24"
                        },
                        {
                            "last_affected":  "0.2.24"
                        },
                        {
                            "introduced":  "0.2.25"
                        },
                        {
                            "last_affected":  "0.2.25"
                        },
                        {
                            "introduced":  "0.2.26"
                        },
                        {
                            "last_affected":  "0.2.26"
                        },
                        {
                            "introduced":  "0.2.27"
                        },
                        {
                            "last_affected":  "0.2.27"
                        },
                        {
                            "introduced":  "0.2.28"
                        },
                        {
                            "last_affected":  "0.2.28"
                        },
                        {
                            "introduced":  "0.2.29"
                        },
                        {
                            "last_affected":  "0.2.29"
                        },
                        {
                            "introduced":  "0.2.30"
                        },
                        {
                            "last_affected":  "0.2.30"
                        },
                        {
                            "introduced":  "0.2.31"
                        },
                        {
                            "last_affected":  "0.2.31"
                        },
                        {
                            "introduced":  "0.2.32"
                        },
                        {
                            "last_affected":  "0.2.32"
                        },
                        {
                            "introduced":  "0.2.33"
                        },
                        {
                            "last_affected":  "0.2.33"
                        },
                        {
                            "introduced":  "0.2.34"
                        },
                        {
                            "last_affected":  "0.2.34"
                        },
                        {
                            "introduced":  "0.2.35"
                        },
                        {
                            "last_affected":  "0.2.35"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandaloneSingleVersion"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/zapping-vbi/zvbi

Affected ranges

Type
GIT
Repo
https://github.com/zapping-vbi/zvbi
Events
Introduced
b3b546e060a8fd6db2f45045831e3f451d5944bf
Fixed
ca1672134b3e2962cd392212c73f44f8f4cb489f
Fixed
5169a428d51c3ae8ff7b0897e8a687d8e05e37b5
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0.2.36"
                },
                {
                    "last_affected":  "0.2.36"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.37"
                },
                {
                    "last_affected":  "0.2.37"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.38"
                },
                {
                    "last_affected":  "0.2.38"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.39"
                },
                {
                    "last_affected":  "0.2.39"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.40"
                },
                {
                    "last_affected":  "0.2.40"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.41"
                },
                {
                    "last_affected":  "0.2.41"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.42"
                },
                {
                    "last_affected":  "0.2.42"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "introduced":  "0.2.43"
                },
                {
                    "last_affected":  "0.2.43"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "ca1672134b3e2962cd392212c73f44f8f4cb489f"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "original_tag":  "v0.2.44",
            "range":  [
                {
                    "fixed":  "5169a428d51c3ae8ff7b0897e8a687d8e05e37b5"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

0.*
0.2.36
0.2.37
0.2.38
0.2.39
0.2.40
0.2.41
0.2.42
0.2.43
v0.*
v0.2.36
v0.2.37
v0.2.38
v0.2.39
v0.2.40
v0.2.41
v0.2.42
v0.2.43

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2177.json"