CVE-2025-2900

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.
Configurations

No configuration.

History

16 May 2025, 14:43

Type Values Removed Values Added
Summary
  • (es) IBM Semeru Runtime 8.0.302.0 a 8.0.442.0, 11.0.12.0 a 11.0.26.0, 17.0.0.0 a 17.0.14.0 y 21.0.0.0 a 12.0.6.0 es vulnerable a una denegación de servicio causada por un desbordamiento de búfer y un bloqueo posterior, debido a un defecto en su implementación de cifrado AES/CBC nativa.

14 May 2025, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-14 19:15

Updated : 2025-05-16 14:43


NVD link : CVE-2025-2900

Mitre link : CVE-2025-2900

CVE.ORG link : CVE-2025-2900


JSON object : View

Products Affected

No product.

CWE
CWE-122

Heap-based Buffer Overflow