Red Hat Enterprise Linux (nodejs, perl): Mehrere Schwachstellen
WID-SEC-2025-1646 · first 28.07.2025 · updated 28.09.2026 · CVSS 7,7
What it is about
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution. Ein lokaler oder entfernter authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Code auszuführen oder andere nicht spezifizierte Effekte zu verursachen.
Under what conditions?
Over the network.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Code auszuführen oder andere nicht spezifizierte Effekte zu verursachen
Am I affected?
Affected according to the BSI:
- Amazon Linux 2
- Red Hat Enterprise Linux
- Ubuntu Linux
- SUSE Linux
- Oracle Linux
- IBM QRadar SIEM
- NetApp ActiveIQ Unified Manager
- IBM App Connect Enterprise
- IBM MQ Operator
- Dell Avamar
- Red Hat OpenShift Container Platform
- IBM MQ Container
and 8 more
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- cPanel cPanel/WHM 132.0.0
- Red Hat OpenShift Container Platform 4.18.27
- Dell Secure Connect Gateway Appliance 5.32.00.18
- Dell NetWorker 19.12.0.4
- Dell NetWorker 19.13.0.2
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Red Hat Security Advisory RHSA-2025:23248 vom 2025-12-16 access.redhat.com
- RedHat Security Advisory vom 2025-07-27 access.redhat.com
- RedHat Security Advisory vom 2025-07-27 access.redhat.com
- Red Hat Security Advisory RHSA-2025:11933 vom 2025-07-28 access.redhat.com
- Oracle Linux Security Advisory ELSA-2025-11803 vom 2025-07-28 linux.oracle.com
- Ubuntu Security Notice USN-7676-1 vom 2025-07-28 ubuntu.com
- Red Hat Security Advisory RHSA-2025:11992 vom 2025-07-28 access.redhat.com
- Red Hat Security Advisory RHSA-2025:12010 vom 2025-07-29 access.redhat.com
- Red Hat Security Advisory RHSA-2025:12036 vom 2025-07-29 access.redhat.com
- Oracle Linux Security Advisory ELSA-2025-11992 vom 2025-07-29 linux.oracle.com
- Oracle Linux Security Advisory ELSA-2025-12010 vom 2025-07-29 linux.oracle.com
- Oracle Linux Security Advisory ELSA-2025-11933 vom 2025-07-29 linux.oracle.com
- Red Hat Security Advisory RHSA-2025:12349 vom 2025-07-31 access.redhat.com
- Oracle Linux Security Advisory ELSA-2025-11802 vom 2025-07-30 linux.oracle.com
- Ubuntu Security Notice USN-7679-1 vom 2025-07-30 ubuntu.com
- Red Hat Security Advisory RHSA-2025:12521 vom 2025-08-04 access.redhat.com
- Amazon Linux Security Advisory ALAS2-2025-2949 vom 2025-08-05 alas.aws.amazon.com
- Red Hat Security Advisory RHSA-2025:12749 vom 2025-08-04 access.redhat.com
- Red Hat Security Advisory RHSA-2025:12522 vom 2025-08-05 access.redhat.com
- SUSE Security Update SUSE-SU-2025:02672-1 vom 2025-08-04 lists.opensuse.org
- Red Hat Security Advisory RHSA-2025:12904 vom 2025-08-05 access.redhat.com
- Red Hat Security Advisory RHSA-2025:12905 vom 2025-08-05 access.redhat.com
- Red Hat Security Advisory RHSA-2025:12901 vom 2025-08-05 access.redhat.com
- Oracle Linux Security Advisory ELSA-2025-12349 vom 2025-08-07 linux.oracle.com
- Red Hat Security Advisory RHSA-2025:13335 vom 2025-08-07 access.redhat.com
and 49 more sources in the original advisory
CVE: CVE-2025-40909, CVE-2025-6965
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.