A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr&#39;ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4397 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4397-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Sylvain Beucler     December 08, 2025                             https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : lasso     Version        : 2.6.1-3+deb11u1     CVE ID         : CVE-2025-46404 CVE-2025-46705 CVE-2025-46784 CVE-2025-47151

    Keane O'Kelley discovered several vulnerabilities in lasso, a library     implementing Liberty Alliance and SAML protocols, which could result     in denial of service or the execution of arbitrary code.

    For Debian 11 bullseye, these problems have been fixed in version     2.6.1-3+deb11u1.

    We recommend that you upgrade your lasso packages.

    For the detailed security status of lasso please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/lasso

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20083-1 advisory.

    - CVE-2025-46404: specially crafted SAML response can lead to a denial of service (bsc#1253092).
    - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service (bsc#1253093).
    - CVE-2025-47151: type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality     can lead to       an arbitrary code execution (bsc#1253095).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7872-1 advisory.

    It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could     possibly use this issue to cause Lasso to crash, resulting in a denial of service. (CVE-2025-46404)

    It was discovered that Lasso incorrectly handled certain malformed SAML assertion responses. A remote     attacker could possibly use this issue to cause Lasso to crash, resulting in a denial of service.
    (CVE-2025-46705)

    It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could     possibly use this issue to cause Lasso to consume memory, resulting in a denial of service. This issue     only affected Ubuntu 22.04 LTS. (CVE-2025-46784)

    It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could     use this issue to cause Lasso to crash, resulting in a denial of service, or possibly execute arbitrary     code. (CVE-2025-47151)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4094-1 advisory.

    - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094)
    - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
    - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
    - CVE-2025-47151: Fixed type confusion vulnerability in the       lasso_node_impl_init_from_xml functionality (bsc#1253095)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6058 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6058-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     November 15, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : lasso     CVE ID         : CVE-2025-46404 CVE-2025-46705 CVE-2025-47151

    Keane O'Kelley discovered several vulnerabilities in lasso, a library     implementing Liberty Alliance and SAML protocols, which could result in     denial of service or the execution of arbitrary code.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 2.8.1-1+deb12u1.

    For the stable distribution (trixie), these problems have been fixed in     version 2.8.2-9+deb13u1.

    We recommend that you upgrade your lasso packages.

    For the detailed security status of lasso please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/lasso

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4090-1 advisory.

    - CVE-2025-46784: Fixed memory exhaustion in Entr'ouvert Lasso (bsc#1253094)
    - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
    - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
    - CVE-2025-47151: Fixed type confusion vulnerability in the       lasso_node_impl_init_from_xml functionality (bsc#1253095)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0862 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-47151:
    A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of     Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code     execution. An attacker can send a malformed SAML response to trigger this vulnerability.

    CVE-2025-46705:
    A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert     Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability.

    CVE-2025-46404:
    A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of     Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the lasso package has been released.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4068-1 advisory.

    - CVE-2025-46404: Fixed denial of service in Entr'ouvert Lasso (bsc#1253092)
    - CVE-2025-46705: Fixed denial of service in Entr'ouvert Lasso (bsc#1253093)
    - CVE-2025-47151: Fixed type confusion vulnerability in the       lasso_node_impl_init_from_xml functionality (bsc#1253095)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1285 advisory.

    A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of     Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-46404)

    A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert     Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-46705)

    A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of     Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code     execution. An attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-47151)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of lasso installed on the remote host is prior to 2.9.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3077 advisory.

    A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of     Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-46404)

    A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert     Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-46705)

    A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of     Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting     in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
    (CVE-2025-46784)

    A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of     Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code     execution. An attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-47151)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of     Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An     attacker can send a malformed SAML response to trigger this vulnerability. (CVE-2025-46404)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
277604	Debian dla-4397 : liblasso-perl - security update	Nessus	Debian Local Security Checks	critical
277005	openSUSE 16 Security Update : lasso (openSUSE-SU-2025-20083-1)	Nessus	SuSE Local Security Checks	critical
275817	Ubuntu 22.04 LTS / 24.04 LTS / 25.04 : Lasso vulnerabilities (USN-7872-1)	Nessus	Ubuntu Local Security Checks	critical
275506	SUSE SLES12 Security Update : lasso (SUSE-SU-2025:4094-1)	Nessus	SuSE Local Security Checks	critical
275497	Debian dsa-6058 : liblasso-perl - security update	Nessus	Debian Local Security Checks	critical
275409	SUSE SLES15 Security Update : lasso (SUSE-SU-2025:4090-1)	Nessus	SuSE Local Security Checks	critical
275397	TencentOS Server 4: lasso (TSSA-2025:0862)	Nessus	Tencent Local Security Checks	critical
275313	Photon OS 5.0: Lasso PHSA-2025-5.0-0674	Nessus	PhotonOS Local Security Checks	critical
275308	Photon OS 4.0: Lasso PHSA-2025-4.0-0903	Nessus	PhotonOS Local Security Checks	critical
275280	SUSE SLES15 / openSUSE 15 Security Update : lasso (SUSE-SU-2025:4068-1)	Nessus	SuSE Local Security Checks	critical
274695	Amazon Linux 2023 : lasso, lasso-devel, perl-lasso (ALAS2023-2025-1285)	Nessus	Amazon Linux Local Security Checks	critical
274680	Amazon Linux 2 : lasso, --advisory ALAS2-2025-3077 (ALAS-2025-3077)	Nessus	Amazon Linux Local Security Checks	critical
274080	Linux Distros Unpatched Vulnerability : CVE-2025-46404	Nessus	Misc.	high

Detections

Analytics

CVE-2025-46404

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high