What is the severity of CVE-2025-2258?

CVE-2025-2258 is classified as a denial-of-service vulnerability, which can significantly affect the availability of the affected system.

How do I fix CVE-2025-2258?

To mitigate CVE-2025-2258, update Eclipse ThreadX NetX Duo to version 6.4.3 or later.

What causes the CVE-2025-2258 vulnerability?

CVE-2025-2258 is caused by an integer underflow issue in the HTTP server functionality when processing packets with a Content-Length smaller than the actual data.

Which versions of Eclipse ThreadX NetX Duo are affected by CVE-2025-2258?

Versions of Eclipse ThreadX NetX Duo prior to 6.4.3 are affected by CVE-2025-2258.

What can an attacker achieve by exploiting CVE-2025-2258?

An attacker can exploit CVE-2025-2258 to induce a denial of service by writing a very large file through specially crafted HTTP packets.

Vulnerability/
CVE-2025-2258

medium

5.3

CWE

191

6/4/2025

7/4/2025

CVE-2025-2258: Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow

First published: Sun Apr 06 2025(Updated: )

In NetX Duo component HTTP server functionality of Eclipse ThreadX NetX Duo before version 6.4.3, an attacker can cause an integer underflow and a subsequent denial of service by writing a very large file, by specially crafted packets with Content-Length smaller than the data request size. A possible workaround is to disable HTTP PUT support. This issue follows an uncomplete fix in CVE-2025-0728.

Credit: emo@eclipse.org

Affected Software	Affected Version	How to fix
Eclipse ThreadX	<6.4.3

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2025-2258?
CVE-2025-2258 is classified as a denial-of-service vulnerability, which can significantly affect the availability of the affected system.
How do I fix CVE-2025-2258?
To mitigate CVE-2025-2258, update Eclipse ThreadX NetX Duo to version 6.4.3 or later.
What causes the CVE-2025-2258 vulnerability?
CVE-2025-2258 is caused by an integer underflow issue in the HTTP server functionality when processing packets with a Content-Length smaller than the actual data.
Which versions of Eclipse ThreadX NetX Duo are affected by CVE-2025-2258?
Versions of Eclipse ThreadX NetX Duo prior to 6.4.3 are affected by CVE-2025-2258.
What can an attacker achieve by exploiting CVE-2025-2258?
An attacker can exploit CVE-2025-2258 to induce a denial of service by writing a very large file through specially crafted HTTP packets.

collector/mitre-cve
source/MITRE
agent/weakness
agent/references
agent/title
agent/first-publish-date
agent/type
agent/description
agent/guess-ai
agent/software-canonical-lookup
agent/softwarecombine
collector/nvd-api
source/NVD
agent/last-modified-date
agent/severity
agent/source
agent/author
agent/tags
agent/event
vendor/eclipse
canonical/eclipse threadx

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.