CVE-2025-7209 is a problematic null pointer dereference vulnerability affecting 9fans plan9port up to version 9da5b44, specifically within the value_decode function in src/libsec/port/x509.c. This vulnerability has a CVSS score of 5.5 (MEDIUM), requiring local access for exploitation and leading to high availability impact. While the exploit has been publicly disclosed, there is no evidence of active exploitation, Metasploit/Nuclei modules, or significant community discussion, and it is not listed in the KEV catalog. Organizations should apply the patch identified as deae8939583d83fd798fca97665e0e94656c3ee8 to mitigate this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2025-03-29CPE matchmatch criteria | cpe:2.3:a:9fans:plan9port:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.