Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-4432

19
FAUCET Score

CVE-2025-4432 describes a low-severity denial-of-service vulnerability in the Rust Ring package, specifically affecting implementations of the QUIC protocol when overflow checking is enabled. An unauthenticated attacker can trigger a panic by sending a specially crafted packet, though this is likely to occur unintentionally with a very low probability (1 in 2^32 packets). There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
Red HatRed Hat OpenShift Container Platform 4
All Versions ImpactedCNA affecteddefault affected
Red HatRed Hat Satellite 6
All Versions ImpactedCNA affecteddefault affected
Red HatRed Hat Trusted Artifact Signer
All Versions ImpactedCNA affecteddefault affected
Red HatRed Hat Trusted Profile Analyzer
All Versions ImpactedCNA affecteddefault affected
Red HatRed Hat Enterprise Linux 10
All Versions ImpactedCNA affecteddefault affected

CVSS Data

CVSS version used by this source: 3.1

5.3MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
Exploitability Score
3.9
Impact Score
1.4
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.86%
Probability of exploitation in next 30 days
EPSS Percentile
55.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0086 is in the 34th percentile among its peer group of 23,725 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (34)

microsoftpatch availablevia msrc
Product: 19711-17084
microsoftpatch availablevia msrc
Product: azl3 kata-containers-cc 3.15.0.aks0-1 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: azl3 kata-containers 3.15.0.aks0-1 on Azure Linux 3.0
microsoftpatch availablevia msrc
Product: 19722-17084
rustpatch availablevia ghsa
Product: ringFixed in: 0.17.12
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: snpguest
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: trustee-guest-components
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: firefox
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: firefox
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: firefox
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: firefox
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: firefox:flatpak/firefox
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: gjs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: polkit
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rpm-ostree
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: rust
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: snpguest
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: thunderbird:flatpak/thunderbird
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: trustee-guest-components
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: kata-containers
redhatvendor investigatingvia redhat_api
Product: Red Hat Satellite 6Fixed in: python3.12-maturin
redhatvendor investigatingvia redhat_api
Product: Red Hat Satellite 6Fixed in: python-maturin
redhatvendor investigatingvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/tuffer-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Trusted Artifact SignerFixed in: rhtas/tuftool-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Trusted Profile AnalyzerFixed in: rhtpa/rhtpa-trustification-service-rhel9
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rust
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: rpm-ostree
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: gjs
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: firefox

Vendor Advisories (3)

microsoft2025-May/CVE-2025-4432Moderate

Ring: some aes functions may panic when overflow checking is enabled in ring

May 13, 2025
rustGHSA-4p46-pwfr-66x6medium

Some AES functions may panic when overflow checking is enabled in ring

Mar 7, 2025
redhatCVE-2025-4432Moderate

ring: Some AES functions may panic when overflow checking is enabled in ring

Mar 7, 2025

References

access.redhat.com / security/cve/CVE-2025-4432
bugzilla.redhat.com / show_bug.cgi
github.com / advisories/GHSA-4p46-pwfr-66x6
github.com / briansmith/ring
github.com / briansmith/ring/blob/main/RELEASES.md
github.com / briansmith/ring/commit/ec2d3cf1d91f148c84e4806b4f0b3c98f6df3b38
github.com / briansmith/ring/pull/2447
rustsec.org / advisories/RUSTSEC-2025-0009.html