CVE-2025-7209
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-09

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability has been found in 9fans plan9port up to 9da5b44 and classified as problematic. Affected by this vulnerability is the function value_decode in the library src/libsec/port/x509.c. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The identifier of the patch is deae8939583d83fd798fca97665e0e94656c3ee8. It is recommended to apply a patch to fix this issue.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-09
Last Modified
2026-04-29
Generated
2026-05-27
AI Q&A
2025-07-09
EPSS Evaluated
2026-05-25
NVD
CVE-2025-7209
EUVD
EUVD-2025-20761
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
9fans plan9port *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the function value_decode within the library src/libsec/port/x509.c of 9fans plan9port up to version 9da5b44. It causes a null pointer dereference, which can lead to a crash or unexpected behavior. Exploiting this vulnerability requires local access to the system.


How can this vulnerability impact me? :

The vulnerability can cause a null pointer dereference leading to application crashes or denial of service. Since local access is required, an attacker with local privileges could exploit this to disrupt service or cause instability in the affected software.


What immediate steps should I take to mitigate this vulnerability?

Apply the patch identified by commit deae8939583d83fd798fca97665e0e94656c3ee8 to fix the vulnerability in the function value_decode in src/libsec/port/x509.c. Since local access is required for the attack, ensure that local user privileges are restricted and monitor for any suspicious local activity until the patch is applied.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart