https://bugzilla.suse.com/1237141
https://bugzilla.suse.com/1238607
https://bugzilla.suse.com/1239298
http://www.nessus.org/u?b5ff22d3
https://www.suse.com/security/cve/CVE-2025-25184
Severity: Medium
ID: 232756
File Name: suse_SU-2025-0874-1.nasl
Version: 1.1
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 3/15/2025
Updated: 3/15/2025
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus
Risk Factor: Medium
Score: 6.7
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2025-27610
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Risk Factor: Medium
Base Score: 6.9
Threat Score: 2.7
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
CVSS Score Source: CVE-2025-27111
CPE: p-cpe:/a:novell:suse_linux:ruby2.5-rubygem-rack, cpe:/o:novell:suse_linux:15
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Exploit Ease: No known exploits are available
Patch Publication Date: 3/14/2025
Vulnerability Publication Date: 2/12/2025
CVE: CVE-2025-25184, CVE-2025-27111, CVE-2025-27610
SuSE: SUSE-SU-2025:0874-1