Cette page suit l'état du correctif pour BellSoft Alpaquita. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2025-24855 →
BELL-CVE-2025-24855
Vulnérabilité dans libxslt (BELL-CVE-2025-24855)
Résumé
Vulnérabilité dans libxslt (BELL-CVE-2025-24855). L'exploitation peut entraîner la prise de contrôle totale du système. Atténuation : mise à jour vers 1.1.37-r2 ou plus.
Résumé généré automatiquement
Assemblé par SecPulse à partir des données sources (CVSS, CWE, versions affectées) à l'aide de modèles, sans IA. Vérifiez la description d'origine et les références ci-dessous.
Une faille nommée BELL-CVE-2025-24855 a été découverte dans libxslt.
Gravité : Info. Faible gravité ou non encore évaluée.
Ce que vous pouvez faire : mettez à jour le logiciel concerné. En cas de doute, contactez votre service informatique ou recherchez "libxslt BELL-CVE-2025-24855" sur le site de l'éditeur.
BELL-CVE-2025-24855 (libxslt). Gravité : Info.
Plan de réponse :
- Vérifier l'avis de l'éditeur (versions affectées, version corrigée).
- Si une version vulnérable tourne en production, planifier l'intervention (urgence selon KEV/CVSS).
- Sans correctif disponible, mitiger via règle WAF, désactivation de la fonctionnalité, etc.
- Surveiller les logs / SIEM pour les IOC et signatures de PoC connus.
PoC et correctifs : voir la section « Références », MITRE et NVD.
❓ Quel est le problème
Une faille (BELL-CVE-2025-24855) dans libxslt. Une faille logicielle sérieuse a été identifiée.
📍 Périmètre concerné
Versions ciblées de libxslt (voir l'avis éditeur). Si en production, identifiez l'exposition immédiatement.
🔥 Gravité
Gravité : Info. Faible gravité ou non encore évaluée.
🔧 Comment corriger
Appliquez la version corrigée indiquée dans l'avis éditeur.
🛡️ Contournement
Si aucun correctif n'est disponible, désactivez la fonctionnalité concernée, appliquez des règles WAF, bloquez via ACL réseau ou isolez la version vulnérable.
🔍 Détection
Vérifiez les versions, analysez les dépendances via SBOM, et surveillez le SIEM pour les IOC et signatures de PoC associés.
Paquets affectés
Alpaquita:23
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r2"}]}]
Alpaquita:23
openjdk11
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:23
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:23
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:23
openjdk11-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]
Alpaquita:23
openjdk17
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:23
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:23
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
Alpaquita:23
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:23
openjdk21
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:23
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:23
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]
Alpaquita:23
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:23
openjdk24
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:23
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:23
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:23
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]
Alpaquita:23
openjdk8-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]
Alpaquita:25
openjdk11
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:25
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:25
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:25
openjdk17
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:25
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:25
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]
Alpaquita:25
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:25
openjdk21
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:25
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:25
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]
Alpaquita:25
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:25
openjdk24
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:25
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:25
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:25
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]
Alpaquita:stream
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r0"}]}]
Alpaquita:stream
openjdk11
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:stream
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:stream
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
Alpaquita:stream
openjdk17
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:stream
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:stream
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
Alpaquita:stream
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
Alpaquita:stream
openjdk21
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:stream
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:stream
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]
Alpaquita:stream
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
Alpaquita:stream
openjdk24
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:stream
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:stream
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
Alpaquita:stream
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]
BellSoft Hardened Containers:23
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.37-r2"}]}]
BellSoft Hardened Containers:23
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk11-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.28_p13-r0"}]}]
BellSoft Hardened Containers:23
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
BellSoft Hardened Containers:23
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.8_p13-r0"}]}]
BellSoft Hardened Containers:23
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:23
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.462_p11-r0"}]}]
BellSoft Hardened Containers:23
openjdk8-perf
[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.462_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.16_p13-r0"}]}]
BellSoft Hardened Containers:25
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.8_p13-r0"}]}]
BellSoft Hardened Containers:25
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24.0.1_p11-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:25
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.462_p11-r0"}]}]
BellSoft Hardened Containers:stream
libxslt
[{"type":"ECOSYSTEM","events":[{"introduced":"1.1.37-r0"},{"fixed":"1.1.43-r0"}]}]
BellSoft Hardened Containers:stream
openjdk11-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk11-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.28_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk17-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk17-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.16_p13-r0"}]}]
BellSoft Hardened Containers:stream
openjdk17-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.16_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk21-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk21-crac
[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.8_p13-r0"}]}]
BellSoft Hardened Containers:stream
openjdk21-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.8_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk24-container-jre
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk24-lite
[{"type":"ECOSYSTEM","events":[{"introduced":"24_p37-r0"},{"fixed":"24.0.2_p12-r0"}]}]
BellSoft Hardened Containers:stream
openjdk8
[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.462_p11-r0"}]}]
Références
- advisory docs.bell-sw.com