8.8Hoch
CVE-2025-55085Web http client: Unchecked Server-Side Malicious Packet Issue
Beschreibung
In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the parsing of HTTP header fields was missing bounds verification. A crafted server response could cause undefined behavior.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Eclipse Foundation | NetX Duo | < 6.4.4 | |
| eclipse | threadx netx duo | < 6.4.4.202503 |
Referenzen und Patches
- https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9c77-rgp9-c2g2 ExploitVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:eclipse:threadx_netx_duo:*:*:*:*:*:*:*:*< 6.4.4.202503