CVE-2025-3155

Q: What is the severity of CVE-2025-3155?

CVE-2025-3155 has a CVSS score of 7.4 (HIGH). CVE-2025-3155 is a vulnerability in Yelp (the GNOME help application) that allows malicious help documents to execute arbitrary scripts. This could enable attackers to exfiltrate user files to external systems. Users of GNOME desktop environments with Yelp installed are affected.

7.4 HIGH

📋 TL;DR

CVE-2025-3155 is a vulnerability in Yelp (the GNOME help application) that allows malicious help documents to execute arbitrary scripts. This could enable attackers to exfiltrate user files to external systems. Users of GNOME desktop environments with Yelp installed are affected.

💻 Affected Systems

Products:

Yelp (GNOME help viewer)

Versions: Versions prior to patched releases in Red Hat advisories

Operating Systems: Linux distributions with GNOME desktop (Red Hat, Fedora, Ubuntu, etc.)

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects systems where Yelp is installed and users open help documents from untrusted sources.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete system compromise through arbitrary code execution leading to data theft, persistence installation, and lateral movement.

🟠

Likely Case

Local file exfiltration and limited system access through script execution in user context.

🟢

If Mitigated

No impact if Yelp is not used or properly restricted, or if malicious help documents are blocked.

🌐 Internet-Facing: LOW - This requires user interaction with malicious help documents, not directly internet-exposed.

🏢 Internal Only: MEDIUM - Internal users could be tricked into opening malicious help documents, leading to data exfiltration.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires user interaction to open malicious help document. No public exploit code identified yet.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check specific Red Hat advisories for version numbers

Vendor Advisory: https://access.redhat.com/errata/RHSA-2025:4450

Restart Required: No

Instructions:

1. Update Yelp package using system package manager. 2. For Red Hat systems: 'yum update yelp' or 'dnf update yelp'. 3. For other distributions, use appropriate package manager commands.

🔧 Temporary Workarounds

Disable Yelp or restrict help document sources

linux

Prevent Yelp from executing scripts or only allow trusted help document sources

sudo apt remove yelp
sudo yum remove yelp

User education and policy

all

Train users not to open help documents from untrusted sources

🧯 If You Can't Patch

Restrict Yelp execution through application control policies
Monitor for suspicious file access patterns from Yelp process

🔍 How to Verify

Check if Vulnerable:

Check Yelp version against patched versions in Red Hat advisories

Check Version:

yelp --version or rpm -q yelp or dpkg -l yelp

Verify Fix Applied:

Verify Yelp package version matches patched version from vendor

📡 Detection & Monitoring

Log Indicators:

Unusual file access patterns from Yelp process
Network connections from Yelp to external systems

Network Indicators:

Outbound connections from Yelp process to unexpected destinations

SIEM Query:

process_name='yelp' AND (file_access_pattern='*' OR network_connection='*')

📊 Metadata

CVE ID: CVE-2025-3155

CVSS v3 Score: 7.4 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE: CWE-601

EPSS Score: 0.67% exploit probability (70.8th percentile)

Published: April 3, 2025

Last Updated: August 12, 2025

🔗 References

https://access.redhat.com/errata/RHSA-2025:4450 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:4451 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:4455 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:4456 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:4457 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:4505 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:4532 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:7430 Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:7569 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-3155 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2357091 Exploit,Issue Tracking,Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/04/04/1 Mailing List
https://lists.debian.org/debian-lts-announce/2025/05/msg00036.html Mailing List
https://lists.debian.org/debian-lts-announce/2025/05/msg00037.html Mailing List
https://gist.github.com/parrot409/e970b155358d45b298d7024edd9b17f2 Exploit,Third Party Advisory

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Codeready Linux Builder by Redhat

Codeready Linux Builder by Redhat

Codeready Linux Builder For Arm64 by Redhat

Codeready Linux Builder For Arm64 by Redhat

Codeready Linux Builder For Arm64 Eus by Redhat

Codeready Linux Builder For Arm64 Eus by Redhat

Codeready Linux Builder For Arm64 Eus by Redhat

Codeready Linux Builder For Arm64 Eus by Redhat

Codeready Linux Builder For Eus by Redhat

Codeready Linux Builder For Eus by Redhat

Codeready Linux Builder For Eus by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems by Redhat

Codeready Linux Builder For Ibm Z Systems Eus by Redhat

Codeready Linux Builder For Ibm Z Systems Eus by Redhat

Codeready Linux Builder For Ibm Z Systems Eus by Redhat

Codeready Linux Builder For Ibm Z Systems Eus by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian by Redhat

Codeready Linux Builder For Power Little Endian Eus by Redhat

Codeready Linux Builder For Power Little Endian Eus by Redhat

Codeready Linux Builder For Power Little Endian Eus by Redhat

Codeready Linux Builder For Power Little Endian Eus by Redhat

Debian Linux by Debian

Enterprise Linux by Redhat

Enterprise Linux by Redhat

Enterprise Linux Eus by Redhat

Enterprise Linux Eus by Redhat

Enterprise Linux Eus by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 by Redhat

Enterprise Linux For Arm 64 Eus by Redhat

Enterprise Linux For Arm 64 Eus by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems by Redhat

Enterprise Linux For Ibm Z Systems Eus by Redhat

Enterprise Linux For Ibm Z Systems Eus by Redhat

Enterprise Linux For Ibm Z Systems Eus by Redhat

Enterprise Linux For Ibm Z Systems Eus by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian by Redhat

Enterprise Linux For Power Little Endian Eus by Redhat

Enterprise Linux For Power Little Endian Eus by Redhat

Enterprise Linux For Power Little Endian Eus by Redhat

Enterprise Linux For Power Little Endian Eus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Aus by Redhat

Enterprise Linux Server Tus by Redhat

Enterprise Linux Server Tus by Redhat

Enterprise Linux Server Tus by Redhat

Enterprise Linux Update Services For Sap Solutions by Redhat

Enterprise Linux Update Services For Sap Solutions by Redhat

Enterprise Linux Update Services For Sap Solutions by Redhat

Enterprise Linux Update Services For Sap Solutions by Redhat

Enterprise Linux Update Services For Sap Solutions by Redhat

Enterprise Linux Update Services For Sap Solutions by Redhat

Yelp by Gnome

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

Disable Yelp or restrict help document sources

User education and policy

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable: