p PatchFirst

CVE-2025-45766

CVE-2025-45766

This page contains facts from public vulnerability sources. Check the original advisory before updating.

poco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expected to be set by an application, not by this library. This dispute is subject to review under CNA rules 4.1.4, 4.1.14, and other rules; the dispute tagging is not meant to recommend an outcome for this CVE Record.

CVSS 7.0 · High · EPSS 0.1%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • poco Debian:12

    Versions
    • 1.11.0-3
    • 1.11.0-3+deb12u1
    • 1.11.0-3+hurd.1
    • 1.11.0-4
    • 1.11.0-4.1
    • 1.13.0-1
    • 1.13.0-2
    • 1.13.0-3
    • 1.13.0-4
    • 1.13.0-5
    • 1.13.0-6
    • 1.14.2-1
    • 1.14.2-2
    • 1.14.2-3
    • 1.14.2-4
    • 1.14.2-5
    • 1.14.2-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Debian:13

    Versions
    • 1.13.0-6
    • 1.13.0-6+deb13u1
    • 1.14.2-1
    • 1.14.2-2
    • 1.14.2-3
    • 1.14.2-4
    • 1.14.2-5
    • 1.14.2-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Debian:14

    Versions
    • 1.13.0-6
    • 1.14.2-1
    • 1.14.2-2
    • 1.14.2-3
    • 1.14.2-4
    • 1.14.2-5
    • 1.14.2-6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:14.04:LTS

    Versions
    • 1.3.6p1-4
    • 1.3.6p1-4+deb7u1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:16.04:LTS

    Versions
    • 1.3.6p1-5.1
    • 1.3.6p1-5.1build1
    • 1.3.6p1-5.1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:18.04:LTS

    Versions
    • 1.7.8+dfsg1-2
    • 1.7.8+dfsg1-3
    • 1.8.0.1-1ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:20.04:LTS

    Versions
    • 1.9.2-3ubuntu2
    • 1.9.2-3ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:22.04:LTS

    Versions
    • 1.10.0-6
    • 1.11.0-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:24.04:LTS

    Versions
    • 1.11.0-3
    • 1.11.0-4
    • 1.11.0-4.1
    • 1.11.0-4.1build1
    • 1.11.0-4.1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:25.10

    Versions
    • 1.13.0-6build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:26.10

    Versions
    • 1.14.2-3
    • 1.14.2-6
    • 1.14.2-6ubuntu1
    • 1.14.2-6ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • poco Ubuntu:26.04:LTS

    Versions
    • 1.13.0-6build2
    • 1.14.2-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →