CVE-2025-6490 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-6490 Interim 1 1 2025-07-12T06:55:27Z current 2025-07-12T06:55:27Z 2025-07-12T06:55:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-6490 A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and classified as problematic. This issue affects the function hashmap_set_with_hash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of the patch is ada4708e5a67114402cd3feb70a4e1d1d7cf773a. It is recommended to apply a patch to fix this issue. The project maintainer explains that the affected code was merged into the main branch but the commit never appeared in an official release. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Availability Extension 15 SP4 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise High Availability Extension 15 SP6 SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Server Applications 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Manager Proxy 4.3 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Manager Retail Branch Server 4.3 SUSE Linux Enterprise Module for Public Cloud 15 SP4 SUSE Manager Server 4.3 openSUSE Leap 15.6 hawk2 rmt-server rmt-server-config rmt-server-pubcloud ruby2.5-rubygem-nokogiri ruby2.5-rubygem-nokogiri-doc ruby2.5-rubygem-nokogiri-testsuite rubygem-nokogiri rmt-server as a component of SLES-LTSS-TERADATA 15 SP2 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP6 hawk2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 rmt-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rmt-server-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS rmt-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS rmt-server-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS rmt-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS rmt-server-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS rmt-server as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS rmt-server-config as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS rubygem-nokogiri as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 rubygem-nokogiri as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 rubygem-nokogiri as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4 rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 rmt-server-pubcloud as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 rmt-server as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 rmt-server as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 rmt-server-config as a component of SUSE Linux Enterprise Module for Server Applications 15 SP6 rmt-server as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rmt-server-config as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rmt-server as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP1-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP2-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP3-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP3-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Server 15 SP3-LTSS rubygem-nokogiri as a component of SUSE Linux Enterprise Server 15 SP3-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP4-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP4-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Server 15 SP4-LTSS rubygem-nokogiri as a component of SUSE Linux Enterprise Server 15 SP4-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15 SP5-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15 SP5-LTSS ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Server 15 SP5-LTSS rubygem-nokogiri as a component of SUSE Linux Enterprise Server 15 SP5-LTSS rmt-server as a component of SUSE Linux Enterprise Server 15-LTSS rmt-server-config as a component of SUSE Linux Enterprise Server 15-LTSS rmt-server as a component of SUSE Linux Enterprise Server Teradata 15 SP4 rubygem-nokogiri as a component of SUSE Linux Enterprise Server Teradata 15 SP4 hawk2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 rmt-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rmt-server-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rubygem-nokogiri as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 rmt-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 rmt-server-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 rubygem-nokogiri as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 rmt-server as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 rmt-server-config as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 ruby2.5-rubygem-nokogiri as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 rubygem-nokogiri as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 rmt-server as a component of SUSE Manager Proxy 4.3 rmt-server-config as a component of SUSE Manager Proxy 4.3 ruby2.5-rubygem-nokogiri as a component of SUSE Manager Proxy 4.3 rubygem-nokogiri as a component of SUSE Manager Proxy 4.3 rmt-server as a component of SUSE Manager Retail Branch Server 4.3 rmt-server-config as a component of SUSE Manager Retail Branch Server 4.3 ruby2.5-rubygem-nokogiri as a component of SUSE Manager Retail Branch Server 4.3 rubygem-nokogiri as a component of SUSE Manager Retail Branch Server 4.3 rmt-server as a component of SUSE Manager Server 4.3 rmt-server-config as a component of SUSE Manager Server 4.3 ruby2.5-rubygem-nokogiri as a component of SUSE Manager Server 4.3 rubygem-nokogiri as a component of SUSE Manager Server 4.3 hawk2 as a component of openSUSE Leap 15.6 rmt-server as a component of openSUSE Leap 15.6 rmt-server-config as a component of openSUSE Leap 15.6 rmt-server-pubcloud as a component of openSUSE Leap 15.6 ruby2.5-rubygem-nokogiri as a component of openSUSE Leap 15.6 ruby2.5-rubygem-nokogiri-doc as a component of openSUSE Leap 15.6 ruby2.5-rubygem-nokogiri-testsuite as a component of openSUSE Leap 15.6 rubygem-nokogiri as a component of openSUSE Leap 15.6 A vulnerability was found in sparklemotion nokogiri c29c920907366cb74af13b4dc2230e9c9e23b833 and classified as problematic. This issue affects the function hashmap_set_with_hash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of the patch is ada4708e5a67114402cd3feb70a4e1d1d7cf773a. It is recommended to apply a patch to fix this issue. The project maintainer explains that the affected code was merged into the main branch but the commit never appeared in an official release. CVE-2025-6490 SLES-LTSS-TERADATA 15 SP2:rmt-server SUSE Linux Enterprise High Availability Extension 12 SP5:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP3:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP4:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP5:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP6:hawk2 SUSE Linux Enterprise High Availability Extension 15 SP7:hawk2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rmt-server SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rmt-server-config SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:rmt-server SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:rmt-server-config SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:rmt-server SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:rmt-server-config SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:rmt-server SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:rmt-server-config SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:rubygem-nokogiri SUSE Linux Enterprise Module for Basesystem 15 SP6:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Module for Basesystem 15 SP6:rubygem-nokogiri SUSE Linux Enterprise Module for Basesystem 15 SP7:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Module for Basesystem 15 SP7:rubygem-nokogiri SUSE Linux Enterprise Module for Public Cloud 15 SP4:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP4:rmt-server-pubcloud SUSE Linux Enterprise Module for Public Cloud 15 SP5:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP5:rmt-server-pubcloud SUSE Linux Enterprise Module for Public Cloud 15 SP6:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP6:rmt-server-pubcloud SUSE Linux Enterprise Module for Public Cloud 15 SP7:rmt-server SUSE Linux Enterprise Module for Public Cloud 15 SP7:rmt-server-pubcloud SUSE Linux Enterprise Module for Server Applications 15 SP6:rmt-server SUSE Linux Enterprise Module for Server Applications 15 SP6:rmt-server-config SUSE Linux Enterprise Module for Server Applications 15 SP7:rmt-server SUSE Linux Enterprise Module for Server Applications 15 SP7:rmt-server-config SUSE Linux Enterprise Server 15 SP1-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP1-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP2-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP2-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP3-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP3-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP3-LTSS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Server 15 SP3-LTSS:rubygem-nokogiri SUSE Linux Enterprise Server 15 SP4-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP4-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP4-LTSS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Server 15 SP4-LTSS:rubygem-nokogiri SUSE Linux Enterprise Server 15 SP5-LTSS:rmt-server SUSE Linux Enterprise Server 15 SP5-LTSS:rmt-server-config SUSE Linux Enterprise Server 15 SP5-LTSS:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Server 15 SP5-LTSS:rubygem-nokogiri SUSE Linux Enterprise Server 15-LTSS:rmt-server SUSE Linux Enterprise Server 15-LTSS:rmt-server-config SUSE Linux Enterprise Server Teradata 15 SP4:rmt-server SUSE Linux Enterprise Server Teradata 15 SP4:rubygem-nokogiri SUSE Linux Enterprise Server for SAP Applications 12 SP5:hawk2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:rmt-server SUSE Linux Enterprise Server for SAP Applications 15 SP3:rmt-server-config SUSE Linux Enterprise Server for SAP Applications 15 SP3:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Server for SAP Applications 15 SP3:rubygem-nokogiri SUSE Linux Enterprise Server for SAP Applications 15 SP4:rmt-server SUSE Linux Enterprise Server for SAP Applications 15 SP4:rmt-server-config SUSE Linux Enterprise Server for SAP Applications 15 SP4:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Server for SAP Applications 15 SP4:rubygem-nokogiri SUSE Linux Enterprise Server for SAP Applications 15 SP5:rmt-server SUSE Linux Enterprise Server for SAP Applications 15 SP5:rmt-server-config SUSE Linux Enterprise Server for SAP Applications 15 SP5:ruby2.5-rubygem-nokogiri SUSE Linux Enterprise Server for SAP Applications 15 SP5:rubygem-nokogiri SUSE Manager Proxy 4.3:rmt-server SUSE Manager Proxy 4.3:rmt-server-config SUSE Manager Proxy 4.3:ruby2.5-rubygem-nokogiri SUSE Manager Proxy 4.3:rubygem-nokogiri SUSE Manager Retail Branch Server 4.3:rmt-server SUSE Manager Retail Branch Server 4.3:rmt-server-config SUSE Manager Retail Branch Server 4.3:ruby2.5-rubygem-nokogiri SUSE Manager Retail Branch Server 4.3:rubygem-nokogiri SUSE Manager Server 4.3:rmt-server SUSE Manager Server 4.3:rmt-server-config SUSE Manager Server 4.3:ruby2.5-rubygem-nokogiri SUSE Manager Server 4.3:rubygem-nokogiri openSUSE Leap 15.6:hawk2 openSUSE Leap 15.6:rmt-server openSUSE Leap 15.6:rmt-server-config openSUSE Leap 15.6:rmt-server-pubcloud openSUSE Leap 15.6:ruby2.5-rubygem-nokogiri openSUSE Leap 15.6:ruby2.5-rubygem-nokogiri-doc openSUSE Leap 15.6:ruby2.5-rubygem-nokogiri-testsuite openSUSE Leap 15.6:rubygem-nokogiri important 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H