CVE-2025-0509: netapp hci_compute_node
CVSS: 7.3v3.1HighAnalyzed
AliasesUBUNTU-CVE-2025-0509CGA-2w7r-xrp3-jg3pCGA-jc8w-843v-44q3CGA-22j8-3jqp-9wv6CGA-26q7-mj98-9rjrCGA-2h4r-r5jx-22w9CGA-2v4p-7q67-xc57CGA-4934-pp9p-fhrrCGA-4rpx-rwh3-38h9CGA-57xp-25w3-j5v6CGA-5ph5-x7mg-pqv9CGA-5vvv-cq5f-6p74CGA-6gmw-4372-cq24CGA-7xq2-439j-p27gCGA-8g2g-rwxr-c5wpCGA-8g8p-48gf-gx77CGA-8jcj-f3wf-jxhrCGA-9qx8-2xg9-jq7mCGA-gcjj-pqxm-j4qpCGA-gg2x-6gg9-69cpCGA-gvp6-mxj9-5grvCGA-h7vw-xw5w-33j2CGA-hjf9-c8f8-3fx3CGA-m34m-xqh8-726mCGA-ppvc-rcw9-wq84CGA-qfh9-h5fh-9vfcCGA-qjgj-j37p-wfvfCGA-qm4g-wgr2-c3r2CGA-rc44-gxgv-5hx2CGA-rc6g-wr3r-4g2cCGA-rfpv-q3hw-hmw5CGA-w3qm-hm6p-pv8rCGA-w7g5-43j3-rxq5CGA-wp6q-rx5c-xj9rCGA-xpw3-qgf9-q3q5
Published 04-02-2025Last modified 17-02-2025
Vulnerability summary
CVE-2025-0509 is a high (CVSS 7.3) vulnerability in netapp hci_compute_node. EPSS estimates a 0.90% chance of exploitation in the next 30 days, higher than 59.1% of scored vulnerabilities.
CVSS score
7.3/10
010
High · v3.1 (CVE.org)EPSS score
0.90%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 5Timeline
- 04-02-2025PublishedVulnerability first disclosed.
- 17-02-2025Last modifiedVulnerability information updated.
Description
A security issue was found in Sparkle before version 2.6.4. An attacker can replace an existing signed update with another payload, bypassing Sparkle’s (Ed)DSA signing checks.
CVSS metrics
5 scores · 5 sources · 1 versionHigh 7.3Preferred score · CVE.org (CNA)
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:HSources5 sources · 6.8–7.3
- OSV · UbuntuEcosystem advisory · calculated6.8MediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · WolfiEcosystem advisory · calculated7.3HighCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated7.3HighCVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
- NVDNIST6.8MediumCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.90%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
0.00 pp
From 0.90% on 19-09-2026
19-09-202619-10-2026
EPSS score0.90%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard17 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.53.0-r0
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Ubuntu4 products
- openjdk-13All versions (No fix recorded)
- openjdk-16All versions (No fix recorded)
- openjdk-18All versions (No fix recorded)
- openjdk-9All versions (No fix recorded)
Netapp2 products
Sparkle-project1 product
- sparkle< 2.6.4
Wolfi1 product
- openjdk-7-jre-libAll versions (No fix recorded)
5 vendors · 25 products
