Red Hat Enterprise Linux Big Requests Extension Integer Overflow Vulnerability (CVE-2025-49176)

Critical Vulnerability Information CVE ID: CVE-2025-49176 Vulnerability Type: Integer Overflow in Big Requests Extension Report Date: 2025-04-23 07:50 UTC Last Modified: 2025-07-02 18:28 UTC Priority: high Severity: high Affected Products: - Red Hat Enterprise Linux 8 - Red Hat Enterprise Linux 9 - Red Hat Enterprise Linux 8.2 Advanced Update Support - Red Hat Enterprise Linux 9.4 Extended Update Support Fix Status: - Resolved in the following security advisories: - RHSA-2025:9384 (Red Hat Enterprise Linux 8) 表- RHSA-2025:9383 (Red Hat Enterprise Linux 9) - RHSA-2025:9385 (Red Hat Enterprise Linux 8) - RHSA-2025:9392 (Red Hat Enterprise Linux 9) - RHSA-2025:9464 (Red Hat Enterprise Linux 8.2 Advanced Update Support) - RHSA-2025:10236 (Red Hat Enterprise Linux 9.4 Extended Update Support) Vulnerability Description: - An integer overflow vulnerability exists in the Big Requests extension. The request length is multiplied by a value before validation, causing an overflow that bypasses size checks and potentially leads to memory corruption.

Goal Reached Thanks to every supporter — we hit 100%!

Red Hat Enterprise Linux Big Requests Extension Integer Overflow Vulnerability (CVE-2025-49176)