CVE-2025-0727

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-0727

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0727.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-0727

Aliases

GHSA-jf6x-9mgc-p72w

Published

2025-02-21T08:19:11.412Z

Modified

2026-07-15T01:49:01.390575033Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow

Details

In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.2, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length in one packet smaller than the data request size of the other packet. A possible workaround is to disable HTTP PUT support.

Database specific

{
    "cwe_ids": [
        "CWE-191"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/0xxx/CVE-2025-0727.json",
    "cna_assigner": "eclipse"
}

References

Affected packages

Git / github.com/eclipse-threadx/netxduo

Affected ranges

Type

GIT

Repo

https://github.com/eclipse-threadx/netxduo

Events

Introduced

Fixed

bd5d12e9e601015a560b2e3bef0e78d63fc0d6c3

Fixed

c78d650be7377aae1a8704bc0ce5cc6f9f189014

Database specific

{
    "cpe": "cpe:2.3:a:eclipse:threadx_netx_duo:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "6.4.2"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v6.*

v6.0.1_rel

v6.0.2_rel

v6.0_rel

v6.1.10_rel

v6.1.11_rel

v6.1.12_rel

v6.1.2_rel

v6.1.3_rel

v6.1.4_rel

v6.1.5_rel

v6.1.6_rel

v6.1.7_rel

v6.1.8_rel

v6.1.9_rel

v6.1_rel

v6.2.0_rel

v6.2.1_rel

v6.3.0_rel

v6.4.0_rel

v6.4.1_rel

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-0727.json"