Search for vulnerabilities
Vulnerability details: VCID-kr21-knq3-aaaf
Vulnerability ID VCID-kr21-knq3-aaaf
Aliases CVE-2019-25085
Summary A vulnerability was found in GNOME gvdb. It has been classified as critical. This affects the function gvdb_table_write_contents_async of the file gvdb-builder.c. The manipulation leads to use after free. It is possible to initiate the attack remotely. The name of the patch is d83587b2a364eb9a9a53be7e6a708074e252de14. It is recommended to apply a patch to fix this issue. The identifier VDB-216789 was assigned to this vulnerability.
Status Published
Exploitability 0.5
Weighted Severity 7.9
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-416 Use After Free
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-25085.json
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00094 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00212 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
epss 0.00381 https://api.first.org/data/v1/epss?cve=CVE-2019-25085
cvssv3.1 7 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 8.8 https://nvd.nist.gov/vuln/detail/CVE-2019-25085
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2019-25085
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-25085.json
https://api.first.org/data/v1/epss?cve=CVE-2019-25085
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-25085
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/GNOME/gvdb/commit/d83587b2a364eb9a9a53be7e6a708074e252de14
https://vuldb.com/?ctiid.216789
https://vuldb.com/?id.216789
2156440 https://bugzilla.redhat.com/show_bug.cgi?id=2156440
cpe:2.3:a:gnome:gvariant_database:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gnome:gvariant_database:*:*:*:*:*:*:*:*
CVE-2019-25085 https://nvd.nist.gov/vuln/detail/CVE-2019-25085
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-25085.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2019-25085
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2019-25085
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.2381
EPSS Score 0.00094
Published At March 28, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
There are no relevant records.