{}

{}

{}

{"bugzilla": {"description": "kubevirt: kubevirt: VM administration denial of service via guest agent", "id": "2421360", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2421360"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.4", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L", "status": "draft"}, "cwe": "CWE-770", "details": ["No description is available for this CVE."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."}, "name": "CVE-2025-14525", "package_state": [{"cpe": "cpe:/a:redhat:container_native_virtualization:4", "fix_state": "Affected", "package_name": "kubevirt", "product_name": "Red Hat OpenShift Virtualization 4"}], "public_date": "2026-01-09T02:02:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-14525\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-14525"], "statement": "This vulnerability is rated Moderate for Red Hat OpenShift Virtualization. A malicious VM user can exploit this flaw when the guest agent is active, by causing it to report an excessive number of network interfaces. This action can lead to an application level denial of service for administrative operations by blocking updates to the Virtual Machine Instance (VMI) configuration.", "threat_severity": "Moderate"}