6.5

CVE-2025-43915

In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.

Data is provided by the National Vulnerability Database (NVD)
Linkerd ≫ Buoyant SwEditionenterprise SwPlatformlinkerd Version >= 2.13.0 <= 2.13.7
Linkerd ≫ Buoyant SwEditionenterprise SwPlatformlinkerd Version >= 2.14.0 <= 2.14.10
Linkerd ≫ Buoyant SwEditionenterprise SwPlatformlinkerd Version >= 2.15.0 <= 2.15.7
Linkerd ≫ Buoyant SwEditionenterprise SwPlatformlinkerd Version >= 2.16.0 < 2.16.5
Linkerd ≫ Buoyant SwEditionenterprise SwPlatformlinkerd Version >= 2.17.0 < 2.17.2
Linkerd ≫ Linkerd SwEditionedge SwPlatformkubernetes Version < 25.2.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.131
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.5 2.2 4.2
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.