发布时间: 2025年9月5日
修改时间: 2025年9月12日
A vulnerability was identified in cmake version 4.1.20250725-gb5cce23, affecting the cmForEachFunctionBlocker::ReplayItems function in the cmForEachCommand.cxx file. This vulnerability can lead to a reachable assertion error and requires local access to exploit. The exploit details have been publicly disclosed and may be utilized. It is recommended to apply patch 37e27f71bc356d880c908040cd0cb68fa2c371b8 to mitigate this issue.
| NVD | openEuler | |
|---|---|---|
| Confidentiality | None | |
| Attack Vector | Local | |
| CVSS评分 | N/A | 3.3 |
| Attack Complexity | Low | |
| Privileges Required | Low | |
| Scope | Unchanged | |
| Integrity | None | |
| User Interaction | None | |
| Availability | Low |
| 公告名 | 概要 | 发布时间 |
|---|---|---|
| KylinSec-SA-2025-2898 | cmake security update | 2025年9月18日 |
| 产品 | 包 | 状态 |
|---|---|---|
| V6 | cmake | Fixed |
| KY3.5.3 | cmake | Fixed |
| KY3.5.2 | cmake | Fixed |
