How to fix CVE-2025-24064?

Within 7 days: Identify all affected systems and apply vendor patches promptly. If patching is delayed, consider network segmentation to limit exposure.

Is Use After Free affected by CVE-2025-24064?

Organizations using Use after free in DNS Server face notable risk from CVE-2025-24064, a use-after-free vulnerability rated CVSS 8.1. Successful exploitation could significantly impact the confidentiality, integrity, or availability of affected systems.

CVE-2025-24064

HIGH

2025-03-11 [email protected]

8.1

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 19:52 vuln.today

CVE Published

Mar 11, 2025 - 17:16 nvd

HIGH 8.1

Description

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Analysis

Use after free in DNS Server allows an unauthorized attacker to execute code over a network. [CVSS 8.1 HIGH]

Technical Context

Classified as CWE-416 (Use After Free). Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Affected Products

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Remediation

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.5

CVSS: +40

POC: 0

CVE-2025-24064 vulnerability details – vuln.today

Back

CVE-2025-24064

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

CVE-2025-24064

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Share

External POC / Exploit Code