« Volver al listado

CVE-2025-43915

Estado: AnalizadaMedia (6.5)—

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Linkerd — BuoyantLinkerd — Linkerd

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-43915",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-43915",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-05T17:27:43.994614Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 4.2,
        "exploitabilityScore": 2.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-05-05T17:18:49.603",
  "references": [
    {
      "url": "https://docs.buoyant.io/security/advisories/2025-01/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.buoyant.io/resources",
      "tags": [
        "Product"
      ],
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-400"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics."
    },
    {
      "lang": "es",
      "value": "En las versiones de Buoyant Edge anteriores a edge-25.2.1 y en Enterprise para Linkerd versiones 2.16.* anteriores a 2.16.5, 2.17.* anteriores a 2.17.2 y 2.18.* anteriores a 2.18.0, se pueden producir agotamiento de los recursos para las métricas de proxy de Linkerd."
    }
  ],
  "lastModified": "2026-06-17T09:24:44.027",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C9742371-D40C-41C4-B2BF-549DFD744D25",
              "versionEndIncluding": "2.13.7",
              "versionStartIncluding": "2.13.0"
            },
            {
              "criteria": "cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50AC0938-14D0-4C9F-91A2-AE672D698440",
              "versionEndIncluding": "2.14.10",
              "versionStartIncluding": "2.14.0"
            },
            {
              "criteria": "cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFA5823A-8764-4DA2-B581-98C81EB8595C",
              "versionEndIncluding": "2.15.7",
              "versionStartIncluding": "2.15.0"
            },
            {
              "criteria": "cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4958DFE3-9F0F-4B67-9BBC-F94D3A006DFD",
              "versionEndExcluding": "2.16.5",
              "versionStartIncluding": "2.16.0"
            },
            {
              "criteria": "cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23536DA5-20CE-4B36-BB34-5487C7CFF3E4",
              "versionEndExcluding": "2.17.2",
              "versionStartIncluding": "2.17.0"
            },
            {
              "criteria": "cpe:2.3:a:linkerd:linkerd:*:*:*:*:edge:kubernetes:*:*",
              "vulnerable": true,
              "matchCriteriaId": "345C63E1-3AC0-4698-9066-DCD4B3DCD8E4",
              "versionEndExcluding": "25.2.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}