CVE-2025-0695: Medium severity cesanta frozen vulnerability
Published Jan 27, 2025
·Updated
An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input.
Affected Software
1 affected component
Cesanta Frozen<1.7
Event History
Jan 27, 2025
CVE Published
via MITRE·11:11 AM
Data Sourced
via MITRE·11:11 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-0695?
CVE-2025-0695 is classified as a high severity vulnerability due to its potential to crash the embedding component.
2
How do I fix CVE-2025-0695?
To fix CVE-2025-0695, upgrade to Cesanta Frozen version 1.7 or later.
3
What types of attacks does CVE-2025-0695 enable?
CVE-2025-0695 enables denial-of-service attacks by crashing the application using the affected library.
4
Which versions of Cesanta Frozen are affected by CVE-2025-0695?
CVE-2025-0695 affects all versions of Cesanta Frozen prior to 1.7.
5
What should I monitor for if I am using an affected version of Cesanta Frozen related to CVE-2025-0695?
If using an affected version, monitor for any abnormal crashes or instability in applications using the Frozen library.