7.5
Élevée
CVE-2025-2900 IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0…
Description
IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Semeru Runtime 21.0 | 21.0.0.0 → 21.0.6.0 | Pas de correctif indiqué |
| Semeru Runtime 17.0 | 17.0.0.0 → 17.0.14.0 | Pas de correctif indiqué |
| Semeru Runtime 11.0 | 11.0.12.0 → 11.0.26.0 | Pas de correctif indiqué |
| Semeru Runtime 8.0 | 8.0.302.0 → 8.0.442.0 | Pas de correctif indiqué |