CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

CVE details

CVE-2025-6375

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.14.2 is able to address this issue. The patch is identified as 6f2f85913c191ab9ddfb8fae781f5d66afccf3bf. It is recommended to upgrade the affected component.

Score
1.9 low
Published
2025-06-21
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
devel/pocopoco1.13.3unaddressedhenry.hu.sh@gmail.com

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>poco</name>
	<range><lt>1.14.2</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A vulnerability was found in poco up to 1.14.1. It has been rated as
	problematic. Affected by this issue is the function
	MultipartInputStream of the file Net/src/MultipartReader.cpp. The
	manipulation leads to null pointer dereference. The attack needs to be
	approached locally. The exploit has been disclosed to the public and
	may be used. Upgrading to version 1.14.2 is able to address this
	issue. The patch is identified as
	6f2f85913c191ab9ddfb8fae781f5d66afccf3bf. It is recommended to upgrade
	the affected component.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2025-6375</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2025-6375</url>
    </references>
    <dates>
      <discovery>2025-06-21</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>