CVE-2025-47151
Critical · 9.8CVSS
9.8
EPSS
1.1%
Published
Nov 5, 2025
CISA due date
—
The record
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | lasso | 0 | 2.6.0-14.el8_10 |
| AlmaLinux:8 | lasso-devel | 0 | 2.6.0-14.el8_10 |
| AlmaLinux:8 | python3-lasso | 0 | 2.6.0-14.el8_10 |
| AlmaLinux:9 | lasso | 0 | 2.7.0-11.el9_7.3 |
| AlmaLinux:9 | lasso-devel | 0 | 2.7.0-11.el9_7.3 |
| AlmaLinux:9 | python3-lasso | 0 | 2.7.0-11.el9_7.3 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | lasso | 0 | 2.8.2-150600.3.5.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | lasso | 0 | 2.8.2-150600.3.5.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | lasso | 0 | 2.8.2-150600.3.5.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | lasso | 0 | 2.8.2-150600.3.5.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | lasso | 0 | 2.6.1-8.12.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | lasso | 0 | 2.6.1-8.12.1 |
| openSUSE:Leap 15.6 | lasso | 0 | 2.8.2-150600.3.5.1 |
| openSUSE:Leap 16.0 | lasso | 0 | 2.8.2-160000.3.1 |
Related vulnerabilities
- CVE-2025-46705 A denial of service vulnerability exists in the g_assert_not_reached functionality of… Also affects lasso
- CVE-2025-46404 A denial of service vulnerability exists in the lasso_provider_verify_saml_signature… Also affects lasso
- CVE-2025-46784 A denial of service vulnerability exists in the lasso_node_init_from_message_with_format… Also affects lasso