Cloudanix VulnDB

CVE-2025-65409

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Dec 30, 2025

CISA due date

—

The record

A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty value as a password.

Affected packages

Ecosystem Package Introduced Fixed
openSUSE:Tumbleweed gnu-recutils 0 1.9-3.1