CVE-2025-14525

{"id": "CVE-2025-14525", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "secalert@redhat.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 2.7, "exploitabilityScore": 3.1}]}, "published": "2026-01-26T20:16:08.163", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-14525", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2421360", "source": "secalert@redhat.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in kubevirt. A user within a virtual machine (VM), if the guest agent is active, can exploit this by causing the agent to report an excessive number of network interfaces. This action can overwhelm the system's ability to store VM configuration updates, effectively blocking changes to the Virtual Machine Instance (VMI). This allows the VM user to restrict the VM administrator's ability to manage the VM, leading to a denial of service for administrative operations."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en kubevirt. Un usuario dentro de una m\u00e1quina virtual (VM), si el agente invitado est\u00e1 activo, puede explotar esto al hacer que el agente informe un n\u00famero excesivo de interfaces de red. Esta acci\u00f3n puede sobrecargar la capacidad del sistema para almacenar actualizaciones de configuraci\u00f3n de la VM, bloqueando eficazmente los cambios en la Instancia de M\u00e1quina Virtual (VMI). Esto permite al usuario de la VM restringir la capacidad del administrador de la VM para gestionar la VM, lo que lleva a una denegaci\u00f3n de servicio para las operaciones administrativas."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "secalert@redhat.com"}