cvelistv5 - cve-2025-1146

CVE-2025-1146 (GCVE-0-2025-1146)

Vulnerability from cvelistv5

Published

2025-02-12 18:27

Modified

2025-02-12 19:40

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-296 - Improper Following of a Certificate's Chain of Trust

Summary

CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above. CrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. Windows and Mac sensors are not affected by this.

References

►

URL

Tags

13ddcd98-6f4a-40a8-8e24-29ca0aee4661

https://www.crowdstrike.com/security-advisories/cve-2025-1146/

Impacted products

Vendor

Product

Version

►

CrowdStrike

Falcon sensor for Linux

Version: 7.20   ≤
Version: 7.19   ≤
Version: 7.18   ≤
Version: 7.17   ≤
Version: 7.16   ≤
Version: 7.15   ≤
Version: 7.14   ≤
Version: 7.13   ≤
Version: 7.11   ≤
Version: 7.10   ≤
Version: 7.07   ≤
Version: 7.06   ≤

	CrowdStrike	Falcon Kubernetes Admission Controller	Version: 7.20 ≤ Version: 7.18 ≤ Version: 7.17 ≤ Version: 7.16 ≤ Version: 7.14 ≤ Version: 7.13 ≤ Version: 7.12 ≤ Version: 7.11 ≤ Version: 7.10 ≤ Version: 7.06 ≤
	CrowdStrike	Falcon Container Sensor	Version: 7.20 ≤ Version: 7.19 ≤ Version: 7.18 ≤ Version: 7.17 ≤ Version: 7.16 ≤ Version: 7.15 ≤ Version: 7.14 ≤ Version: 7.13 ≤ Version: 7.12 ≤ Version: 7.11 ≤ Version: 7.10 ≤ Version: 7.06 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-1146",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-12T19:40:26.132160Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-12T19:40:41.867Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "packageName": "falcon-sensor",
          "platforms": [
            "Linux"
          ],
          "product": "Falcon sensor for Linux",
          "vendor": "CrowdStrike",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.21.17405",
              "versionType": "semver"
            },
            {
              "lessThan": "7.20.17308",
              "status": "affected",
              "version": "7.20",
              "versionType": "semver"
            },
            {
              "lessThan": "7.19.17221",
              "status": "affected",
              "version": "7.19",
              "versionType": "semver"
            },
            {
              "lessThan": "7.18.17131",
              "status": "affected",
              "version": "7.18",
              "versionType": "semver"
            },
            {
              "lessThan": "7.17.17014",
              "status": "affected",
              "version": "7.17",
              "versionType": "semver"
            },
            {
              "lessThan": "7.16.16909",
              "status": "affected",
              "version": "7.16",
              "versionType": "semver"
            },
            {
              "lessThan": "7.15.16806",
              "status": "affected",
              "version": "7.15",
              "versionType": "semver"
            },
            {
              "lessThan": "7.14.16705",
              "status": "affected",
              "version": "7.14",
              "versionType": "semver"
            },
            {
              "lessThan": "7.13.16606",
              "status": "affected",
              "version": "7.13",
              "versionType": "semver"
            },
            {
              "lessThan": "7.11.16410",
              "status": "affected",
              "version": "7.11",
              "versionType": "semver"
            },
            {
              "lessThan": "7.10.16321",
              "status": "affected",
              "version": "7.10",
              "versionType": "semver"
            },
            {
              "lessThan": "7.07.16209",
              "status": "affected",
              "version": "7.07",
              "versionType": "semver"
            },
            {
              "lessThan": "7.06.16113",
              "status": "affected",
              "version": "7.06",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Linux"
          ],
          "product": "Falcon Kubernetes Admission Controller",
          "vendor": "CrowdStrike",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.21.1904",
              "versionType": "semver"
            },
            {
              "lessThan": "7.20.1808",
              "status": "affected",
              "version": "7.20",
              "versionType": "semver"
            },
            {
              "lessThan": "7.18.1605",
              "status": "affected",
              "version": "7.18",
              "versionType": "semver"
            },
            {
              "lessThan": "7.17.1503",
              "status": "affected",
              "version": "7.17",
              "versionType": "semver"
            },
            {
              "lessThan": "7.16.1403",
              "status": "affected",
              "version": "7.16",
              "versionType": "semver"
            },
            {
              "lessThan": "7.14.1203",
              "status": "affected",
              "version": "7.14",
              "versionType": "semver"
            },
            {
              "lessThan": "7.13.1102",
              "status": "affected",
              "version": "7.13",
              "versionType": "semver"
            },
            {
              "lessThan": "7.12.1002",
              "status": "affected",
              "version": "7.12",
              "versionType": "semver"
            },
            {
              "lessThan": "7.11.904",
              "status": "affected",
              "version": "7.11",
              "versionType": "semver"
            },
            {
              "lessThan": "7.10.806",
              "status": "affected",
              "version": "7.10",
              "versionType": "semver"
            },
            {
              "lessThan": "7.06.603",
              "status": "affected",
              "version": "7.06",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "platforms": [
            "Linux"
          ],
          "product": "Falcon Container Sensor",
          "vendor": "CrowdStrike",
          "versions": [
            {
              "status": "unaffected",
              "version": "7.21.6003",
              "versionType": "semver"
            },
            {
              "lessThan": "7.20.5908",
              "status": "affected",
              "version": "7.20",
              "versionType": "semver"
            },
            {
              "lessThan": "7.19.5807",
              "status": "affected",
              "version": "7.19",
              "versionType": "semver"
            },
            {
              "lessThan": "7.18.5705",
              "status": "affected",
              "version": "7.18",
              "versionType": "semver"
            },
            {
              "lessThan": "7.17.5603",
              "status": "affected",
              "version": "7.17",
              "versionType": "semver"
            },
            {
              "lessThan": "7.16.5503",
              "status": "affected",
              "version": "7.16",
              "versionType": "semver"
            },
            {
              "lessThan": "7.15.5403",
              "status": "affected",
              "version": "7.15",
              "versionType": "semver"
            },
            {
              "lessThan": "7.14.5306",
              "status": "affected",
              "version": "7.14",
              "versionType": "semver"
            },
            {
              "lessThan": "7.13.5202",
              "status": "affected",
              "version": "7.13",
              "versionType": "semver"
            },
            {
              "lessThan": "7.12.5102",
              "status": "affected",
              "version": "7.12",
              "versionType": "semver"
            },
            {
              "lessThan": "7.11.5003",
              "status": "affected",
              "version": "7.11",
              "versionType": "semver"
            },
            {
              "lessThan": "7.10.4907",
              "status": "affected",
              "version": "7.10",
              "versionType": "semver"
            },
            {
              "lessThan": "7.06.4705",
              "status": "affected",
              "version": "7.06",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.20.17308",
                  "versionStartIncluding": "7.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.19.17221",
                  "versionStartIncluding": "7.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.18.17131",
                  "versionStartIncluding": "7.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.17.17014",
                  "versionStartIncluding": "7.17",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.16.16909",
                  "versionStartIncluding": "7.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.15.16806",
                  "versionStartIncluding": "7.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.14.16705",
                  "versionStartIncluding": "7.14",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.13.16606",
                  "versionStartIncluding": "7.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.11.16410",
                  "versionStartIncluding": "7.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.10.16321",
                  "versionStartIncluding": "7.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.07.16209",
                  "versionStartIncluding": "7.07",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*",
                  "versionEndExcluding": "7.06.16113",
                  "versionStartIncluding": "7.06",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        }
      ],
      "datePublic": "2025-02-12T18:27:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\u003cbr\u003e\u003cbr\u003e \u003cbr\u003eCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \u003cbr\u003e\u003cbr\u003e\u003cbr\u003eWindows and Mac sensors are not affected by this.\u003cbr\u003e\u003cbr\u003e"
            }
          ],
          "value": "CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\n\n \nCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \n\n\nWindows and Mac sensors are not affected by this."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Adversary in the Middle (AiTM)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-296",
              "description": "CWE-296: Improper Following of a Certificate\u0027s Chain of Trust",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-12T18:48:50.205Z",
        "orgId": "13ddcd98-6f4a-40a8-8e24-29ca0aee4661",
        "shortName": "CrowdStrike"
      },
      "references": [
        {
          "url": "https://www.crowdstrike.com/security-advisories/cve-2025-1146/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "CrowdStrike Falcon Sensor for Linux TLS Issue",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "13ddcd98-6f4a-40a8-8e24-29ca0aee4661",
    "assignerShortName": "CrowdStrike",
    "cveId": "CVE-2025-1146",
    "datePublished": "2025-02-12T18:27:35.458Z",
    "dateReserved": "2025-02-10T03:03:51.392Z",
    "dateUpdated": "2025-02-12T19:40:41.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-1146\",\"sourceIdentifier\":\"13ddcd98-6f4a-40a8-8e24-29ca0aee4661\",\"published\":\"2025-02-12T19:15:09.840\",\"lastModified\":\"2025-02-12T19:15:09.840\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\\n\\n \\nCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \\n\\n\\nWindows and Mac sensors are not affected by this.\"},{\"lang\":\"es\",\"value\":\"CrowdStrike utiliza el est\u00e1ndar industrial TLS (seguridad de la capa de transporte) para proteger las comunicaciones desde el sensor Falcon a la nube de CrowdStrike. CrowdStrike ha identificado un error en la l\u00f3gica de validaci\u00f3n en el sensor Falcon para Linux, Falcon Kubernetes Admission Controller y Falcon Container Sensor, donde nuestra rutina de conexi\u00f3n TLS a la nube de CrowdStrike puede procesar incorrectamente la validaci\u00f3n del certificado del servidor. Esto podr\u00eda permitir que un atacante con la capacidad de controlar el tr\u00e1fico de la red realice potencialmente un ataque de intermediario (MiTM). CrowdStrike identific\u00f3 este problema internamente y lanz\u00f3 una correcci\u00f3n de seguridad en todas las versiones 7.06 y posteriores del sensor Falcon para Linux, Falcon Kubernetes Admission Controller y Falcon Container Sensor. CrowdStrike identific\u00f3 este problema a trav\u00e9s de nuestro riguroso y prolongado proceso de revisi\u00f3n de seguridad, que se ha fortalecido continuamente con un an\u00e1lisis m\u00e1s profundo del c\u00f3digo fuente y mejoras continuas del programa como parte de nuestro compromiso con la resiliencia de la seguridad. CrowdStrike no tiene indicios de ninguna explotaci\u00f3n de este problema en la naturaleza. CrowdStrike ha aprovechado sus capacidades de inteligencia y b\u00fasqueda de amenazas de primer nivel para monitorear activamente los indicios de abuso o uso de esta falla y continuar\u00e1 haci\u00e9ndolo. Los sensores de Windows y Mac no se ven afectados por esto.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"13ddcd98-6f4a-40a8-8e24-29ca0aee4661\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"13ddcd98-6f4a-40a8-8e24-29ca0aee4661\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-296\"}]}],\"references\":[{\"url\":\"https://www.crowdstrike.com/security-advisories/cve-2025-1146/\",\"source\":\"13ddcd98-6f4a-40a8-8e24-29ca0aee4661\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-1146\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-12T19:40:26.132160Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-12T19:40:31.098Z\"}}], \"cna\": {\"title\": \"CrowdStrike Falcon Sensor for Linux TLS Issue\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"impacts\": [{\"capecId\": \"CAPEC-94\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-94 Adversary in the Middle (AiTM)\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"CrowdStrike\", \"product\": \"Falcon sensor for Linux\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.21.17405\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.20\", \"lessThan\": \"7.20.17308\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.19\", \"lessThan\": \"7.19.17221\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.18\", \"lessThan\": \"7.18.17131\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.17\", \"lessThan\": \"7.17.17014\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.16\", \"lessThan\": \"7.16.16909\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.15\", \"lessThan\": \"7.15.16806\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.14\", \"lessThan\": \"7.14.16705\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.13\", \"lessThan\": \"7.13.16606\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.11\", \"lessThan\": \"7.11.16410\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.10\", \"lessThan\": \"7.10.16321\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.07\", \"lessThan\": \"7.07.16209\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.06\", \"lessThan\": \"7.06.16113\", \"versionType\": \"semver\"}], \"platforms\": [\"Linux\"], \"packageName\": \"falcon-sensor\", \"defaultStatus\": \"unknown\"}, {\"vendor\": \"CrowdStrike\", \"product\": \"Falcon Kubernetes Admission Controller\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.21.1904\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.20\", \"lessThan\": \"7.20.1808\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.18\", \"lessThan\": \"7.18.1605\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.17\", \"lessThan\": \"7.17.1503\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.16\", \"lessThan\": \"7.16.1403\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.14\", \"lessThan\": \"7.14.1203\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.13\", \"lessThan\": \"7.13.1102\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.12\", \"lessThan\": \"7.12.1002\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.11\", \"lessThan\": \"7.11.904\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.10\", \"lessThan\": \"7.10.806\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.06\", \"lessThan\": \"7.06.603\", \"versionType\": \"semver\"}], \"platforms\": [\"Linux\"], \"defaultStatus\": \"unknown\"}, {\"vendor\": \"CrowdStrike\", \"product\": \"Falcon Container Sensor\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"7.21.6003\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.20\", \"lessThan\": \"7.20.5908\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.19\", \"lessThan\": \"7.19.5807\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.18\", \"lessThan\": \"7.18.5705\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.17\", \"lessThan\": \"7.17.5603\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.16\", \"lessThan\": \"7.16.5503\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.15\", \"lessThan\": \"7.15.5403\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.14\", \"lessThan\": \"7.14.5306\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.13\", \"lessThan\": \"7.13.5202\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.12\", \"lessThan\": \"7.12.5102\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.11\", \"lessThan\": \"7.11.5003\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.10\", \"lessThan\": \"7.10.4907\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"7.06\", \"lessThan\": \"7.06.4705\", \"versionType\": \"semver\"}], \"platforms\": [\"Linux\"], \"defaultStatus\": \"unknown\"}], \"datePublic\": \"2025-02-12T18:27:00.000Z\", \"references\": [{\"url\": \"https://www.crowdstrike.com/security-advisories/cve-2025-1146/\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\\n\\n \\nCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \\n\\n\\nWindows and Mac sensors are not affected by this.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\u003cbr\u003e\u003cbr\u003e \u003cbr\u003eCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \u003cbr\u003e\u003cbr\u003e\u003cbr\u003eWindows and Mac sensors are not affected by this.\u003cbr\u003e\u003cbr\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-296\", \"description\": \"CWE-296: Improper Following of a Certificate\u0027s Chain of Trust\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.20.17308\", \"versionStartIncluding\": \"7.20\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.19.17221\", \"versionStartIncluding\": \"7.19\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.18.17131\", \"versionStartIncluding\": \"7.18\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.17.17014\", \"versionStartIncluding\": \"7.17\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.16.16909\", \"versionStartIncluding\": \"7.16\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.15.16806\", \"versionStartIncluding\": \"7.15\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.14.16705\", \"versionStartIncluding\": \"7.14\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.13.16606\", \"versionStartIncluding\": \"7.13\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.11.16410\", \"versionStartIncluding\": \"7.11\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.10.16321\", \"versionStartIncluding\": \"7.10\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.07.16209\", \"versionStartIncluding\": \"7.07\"}, {\"criteria\": \"cpe:2.3:a:crowdstrike:falcon:*:*:*:*:*:linux:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"7.06.16113\", \"versionStartIncluding\": \"7.06\"}], \"operator\": \"OR\"}], \"operator\": \"AND\"}], \"providerMetadata\": {\"orgId\": \"13ddcd98-6f4a-40a8-8e24-29ca0aee4661\", \"shortName\": \"CrowdStrike\", \"dateUpdated\": \"2025-02-12T18:48:50.205Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-1146\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-12T19:40:41.867Z\", \"dateReserved\": \"2025-02-10T03:03:51.392Z\", \"assignerOrgId\": \"13ddcd98-6f4a-40a8-8e24-29ca0aee4661\", \"datePublished\": \"2025-02-12T18:27:35.458Z\", \"assignerShortName\": \"CrowdStrike\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

ghsa-844x-j3wf-r5rf

Vulnerability from github

Published

2025-02-12 21:31

Modified

2025-02-12 21:31

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so.

Windows and Mac sensors are not affected by this.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-1146"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-296"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-12T19:15:09Z",
    "severity": "HIGH"
  },
  "details": "CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\n\n \nCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \n\n\nWindows and Mac sensors are not affected by this.",
  "id": "GHSA-844x-j3wf-r5rf",
  "modified": "2025-02-12T21:31:53Z",
  "published": "2025-02-12T21:31:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1146"
    },
    {
      "type": "WEB",
      "url": "https://www.crowdstrike.com/security-advisories/cve-2025-1146"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

ncsc-2025-0055

Vulnerability from csaf_ncscnl

Published

2025-02-13 08:22

Modified

2025-02-13 08:22

Summary

Kwetsbaarheid verholpen in CrowdStrike Falcon sensor

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

CrowdStrike heeft een kwetsbaarheid verholpen in zijn Falcon sensor voor Linux, Falcon Kubernetes Admission Controller, en Falcon Container Sensor.

Interpretaties

De kwetsbaarheid bevindt zich in de validatielogica van de Falcon sensor, wat kan leiden tot een man-in-the-middle aanval. Hoewel er geen bewijs is van exploitatie met betrekking tot deze kwetsbaarheid, is het belangrijk dat beveiligingsteams de bijgewerkte versies gebruiken om de integriteit van hun systemen te waarborgen.

Oplossingen

CrowdStrike heeft een patch uitgebracht voor de getroffen versies. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-296

Improper Following of a Certificate's Chain of Trust

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "CrowdStrike heeft een kwetsbaarheid verholpen in zijn Falcon sensor voor Linux, Falcon Kubernetes Admission Controller, en Falcon Container Sensor.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheid bevindt zich in de validatielogica van de Falcon sensor, wat kan leiden tot een man-in-the-middle aanval. Hoewel er geen bewijs is van exploitatie met betrekking tot deze kwetsbaarheid, is het belangrijk dat beveiligingsteams de bijgewerkte versies gebruiken om de integriteit van hun systemen te waarborgen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "CrowdStrike heeft een patch uitgebracht voor de getroffen versies. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Improper Following of a Certificate\u0027s Chain of Trust",
        "title": "CWE-296"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://www.crowdstrike.com/security-advisories/cve-2025-1146/"
      }
    ],
    "title": "Kwetsbaarheid verholpen in CrowdStrike Falcon sensor",
    "tracking": {
      "current_release_date": "2025-02-13T08:22:07.880125Z",
      "id": "NCSC-2025-0055",
      "initial_release_date": "2025-02-13T08:22:07.880125Z",
      "revision_history": [
        {
          "date": "2025-02-13T08:22:07.880125Z",
          "number": "0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "falcon_container_sensor",
            "product": {
              "name": "falcon_container_sensor",
              "product_id": "CSAFPID-1767958",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:crowdstrike:falcon_container_sensor:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "falcon_kubernetes_admission_controller",
            "product": {
              "name": "falcon_kubernetes_admission_controller",
              "product_id": "CSAFPID-1767957",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:crowdstrike:falcon_kubernetes_admission_controller:*:*:*:*:*:*:*:*"
              }
            }
          },
          {
            "category": "product_name",
            "name": "falcon_sensor_for_linux",
            "product": {
              "name": "falcon_sensor_for_linux",
              "product_id": "CSAFPID-1767956",
              "product_identification_helper": {
                "cpe": "cpe:2.3:a:crowdstrike:falcon_sensor_for_linux:*:*:*:*:*:*:*:*"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "crowdstrike"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-1146",
      "cwe": {
        "id": "CWE-296",
        "name": "Improper Following of a Certificate\u0027s Chain of Trust"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Following of a Certificate\u0027s Chain of Trust",
          "title": "CWE-296"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-1767958",
          "CSAFPID-1767957",
          "CSAFPID-1767956"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-1146",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-1146.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-1767958",
            "CSAFPID-1767957",
            "CSAFPID-1767956"
          ]
        }
      ],
      "title": "CVE-2025-1146"
    }
  ]
}

fkie_cve-2025-1146

Vulnerability from fkie_nvd

Published

2025-02-12 19:15

Modified

2025-02-12 19:15

Severity ?

8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

▶	URL	Tags
	13ddcd98-6f4a-40a8-8e24-29ca0aee4661	https://www.crowdstrike.com/security-advisories/cve-2025-1146/

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.\n\n \nCrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so. \n\n\nWindows and Mac sensors are not affected by this."
    },
    {
      "lang": "es",
      "value": "CrowdStrike utiliza el est\u00e1ndar industrial TLS (seguridad de la capa de transporte) para proteger las comunicaciones desde el sensor Falcon a la nube de CrowdStrike. CrowdStrike ha identificado un error en la l\u00f3gica de validaci\u00f3n en el sensor Falcon para Linux, Falcon Kubernetes Admission Controller y Falcon Container Sensor, donde nuestra rutina de conexi\u00f3n TLS a la nube de CrowdStrike puede procesar incorrectamente la validaci\u00f3n del certificado del servidor. Esto podr\u00eda permitir que un atacante con la capacidad de controlar el tr\u00e1fico de la red realice potencialmente un ataque de intermediario (MiTM). CrowdStrike identific\u00f3 este problema internamente y lanz\u00f3 una correcci\u00f3n de seguridad en todas las versiones 7.06 y posteriores del sensor Falcon para Linux, Falcon Kubernetes Admission Controller y Falcon Container Sensor. CrowdStrike identific\u00f3 este problema a trav\u00e9s de nuestro riguroso y prolongado proceso de revisi\u00f3n de seguridad, que se ha fortalecido continuamente con un an\u00e1lisis m\u00e1s profundo del c\u00f3digo fuente y mejoras continuas del programa como parte de nuestro compromiso con la resiliencia de la seguridad. CrowdStrike no tiene indicios de ninguna explotaci\u00f3n de este problema en la naturaleza. CrowdStrike ha aprovechado sus capacidades de inteligencia y b\u00fasqueda de amenazas de primer nivel para monitorear activamente los indicios de abuso o uso de esta falla y continuar\u00e1 haci\u00e9ndolo. Los sensores de Windows y Mac no se ven afectados por esto."
    }
  ],
  "id": "CVE-2025-1146",
  "lastModified": "2025-02-12T19:15:09.840",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.2,
        "impactScore": 5.9,
        "source": "13ddcd98-6f4a-40a8-8e24-29ca0aee4661",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-02-12T19:15:09.840",
  "references": [
    {
      "source": "13ddcd98-6f4a-40a8-8e24-29ca0aee4661",
      "url": "https://www.crowdstrike.com/security-advisories/cve-2025-1146/"
    }
  ],
  "sourceIdentifier": "13ddcd98-6f4a-40a8-8e24-29ca0aee4661",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-296"
        }
      ],
      "source": "13ddcd98-6f4a-40a8-8e24-29ca0aee4661",
      "type": "Secondary"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2025-1146 (GCVE-0-2025-1146)

Vulnerability from cvelistv5

ghsa-844x-j3wf-r5rf

Vulnerability from github

ncsc-2025-0055

Vulnerability from csaf_ncscnl

fkie_cve-2025-1146

Vulnerability from fkie_nvd

Tags

Sightings

Nomenclature