--- title: "Security digest: March 4, 2025" url: https://erroneo.us/security/2025-03-04/ description: "March 4, 2025 vulnerability digest: 4 CISA KEV additions (Linux, VMware); 1 critical advisory (Go). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-03-04 date_modified: 2025-03-04 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: March 4, 2025 4 known exploited (cisa kev) additions and 1 critical advisory. ## Take stock - Do you run any of these? VMware ESXi, Workstation, and Fusion, VMware ESXi, VMware ESXi and Workstation, Linux Kernel. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-03-25. - Go: 1 critical advisory ( github.com/zitadel/zitadel/v2 , github.com/zitadel/zitadel ). Check with govulncheck ./... . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2025-22226](https://erroneo.us/security/cve/CVE-2025-22226/index.md) VMware ESXi, Workstation, and Fusion: VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability (CISA due 2025-03-25) - [CVE-2025-22225](https://erroneo.us/security/cve/CVE-2025-22225/index.md) VMware ESXi: VMware ESXi Arbitrary Write Vulnerability (CISA due 2025-03-25) - [CVE-2025-22224](https://erroneo.us/security/cve/CVE-2025-22224/index.md) VMware ESXi and Workstation: VMware ESXi and Workstation TOCTOU Race Condition Vulnerability (CISA due 2025-03-25) - [CVE-2024-50302](https://erroneo.us/security/cve/CVE-2024-50302/index.md) Linux Kernel: Linux Kernel Use of Uninitialized Resource Vulnerability (CISA due 2025-03-25) ## Critical advisories - [CVE-2025-27507](https://erroneo.us/security/cve/CVE-2025-27507/index.md) IDOR Vulnerabilities in ZITADEL's Admin API that Primarily Impact LDAP Configurations — Go github.com/zitadel/zitadel/v2 < 2.63.8 → 2.63.8; Go github.com/zitadel/zitadel/v2 >= 2.64.0, < 2.64.5 → 2.64.5; Go github.com/zitadel/zitadel/v2 >= 2.65.0, < 2.65.6 → 2.65.6 --- Source page: https://erroneo.us/security/2025-03-04/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt