CVE-2025-46705
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service.
Risk Assessment
An attacker can send a malformed SAML response to cause unavailability of the SAML-based authentication service. This may disrupt user logins and application access.
Recommendation
Update Lasso to a patched version or validate SAML responses before processing. Consider restricting trust to known identity providers.
Other vulnerabilities in Entr'ouvert Lasso
See all- CVE-2025-47151Critical
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to arbitrary code execution.
- CVE-2025-46784High
A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
- CVE-2025-46404High
A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
Original NVD description (English source)
A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS