CVE-2025-2260
Eclipse ThreadX NetX Duo HTTP component server denial of service
概要
Eclipse ThreadX NetX Duo HTTP component server denial of service
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before
version 6.4.3, an attacker can cause a denial of service by specially
crafted packets. The core issue is missing closing of a file in case of
an error condition, resulting in the 404 error for each further file
request. Users can work-around the issue by disabling the PUT request
support.
This issue follows an incomplete fix of CVE-2025-0726.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web talosintelligence.com