A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python3-lassoUpgrade lassoUpgrade lasso-debuginfoUpgrade lasso-devel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade lasso-debugsourceUpgrade python3-lassoUpgrade lassoUpgrade perl-lassoUpgrade perl-lasso-debuginfoUpgrade lasso-debuginfoUpgrade python3-lasso-debuginfoUpgrade lasso-devel | Nov 11, 2025 | Nov 5, 2025 |
| Debian | — | Upgrade lasso | Nov 17, 2025 | Nov 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 5, 2025 |
| Suse | — | Upgrade liblasso3Upgrade liblasso-develUpgrade python3-lasso | Dec 5, 2025 | Nov 12, 2025 |
| Ubuntu | — | Upgrade python3-lassoUpgrade liblasso3Upgrade liblasso-perlUpgrade liblasso3t64 | Nov 19, 2025 | Nov 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub