CVE-2025-2962CWE-835

CVE-2025-2962

High · published June 24, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
46.3
In the wild
Unconfirmed
What it is

A denial-of-service issue in the dns implemenation could cause an infinite loop.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.3th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2025-06-24T10:15Z
Affected products (1)
ProductVersionsFixed in
zephyrproject/zephyr≤ 4.1.0—
References (1)
https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2qp5-c2vq-g2ww · [email protected]
EPSS history
Timeline
  • 24 JUN 05:32Z
    Infinite loop in dns_copy_qname
    cvelistv5