UBUNTU-CVE-2025-6545

Advisory lineage Upstream: 1 Downstream: 1
Upstream
CVE-2025-6545
Downstream
USN-8452-1
Published: 23 Jun 2025, 19:15
Last modified:18 Jun 2026, 22:00

Vulnerability Summary

Overall Risk (default)
high
70/100
CVSS Score
9.1 CRITICAL
4.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

23 Jun 2025, 19:15
Published
Vulnerability first disclosed
18 Jun 2026, 22:00
Last Modified
Vulnerability information updated

Description

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2.

CVSS Metrics

  • v4.0•CRITICAL•Score: 9.1CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:N/SC:H/SI:H/SA:H

Affected Systems

  • ubuntu•node-pbkdf2

    all | all | all | all | all | all | < 3.0.14-2ubuntu0.1~esm1 | < 3.0.16-1ubuntu0.1~esm1 | < 3.1.2-2ubuntu0.1~esm1 | < 3.1.2-3ubuntu0.1~esm1

References (6)