Critical Denial of Service Vulnerabilities in Lasso Affecting Ubuntu Releases

Critical Denial of Service Vulnerabilities in Lasso Affecting Ubuntu Releases

First seen 2 Dec 2025, 18:33 UTC UbuntuLinuxsecurity 37.7

Article Content

Browse articles
ThreatCluster

Multiple critical vulnerabilities were identified in the Lasso library, affecting Ubuntu 25.04, 24.04 LTS, and 22.04 LTS. These vulnerabilities allow remote attackers to exploit malformed SAML responses, potentially causing the Lasso library to crash and resulting in a denial of service. Key vulnerabilities include CVE-2025-46404 and CVE-2025-46705.