EUVD-2025-19001Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A denial-of-service issue in the dns implemenation could cause an infinite loop.
AnalysisAI
CVE-2025-2962 is a denial-of-service vulnerability in a DNS implementation that triggers an infinite loop condition, allowing unauthenticated remote attackers to crash DNS services with high availability impact. The vulnerability affects DNS resolver implementations and has a CVSS score of 7.5 (High) with a network-based attack vector requiring no privileges or user interaction. While the CVE ID and basic metadata are provided, specific product names, versions, KEV status, EPSS scores, and public proof-of-concept availability cannot be confirmed from the limited data supplied.
Technical ContextAI
The vulnerability exists in DNS protocol implementation logic, classified under CWE-835 (Loop with Unreachable Exit Condition). This weakness indicates improper control flow in DNS packet parsing or response handling that fails to properly validate loop termination conditions. DNS implementations typically parse zone file records, handle recursive queries, or process DNSSEC validation—any of these paths could contain unbounded loops triggered by malformed DNS queries or responses. Without specific CPE data provided, the affected products cannot be definitively identified, but this class of vulnerability commonly affects BIND, Unbound, PowerDNS, systemd-resolved, and other widely-deployed resolver implementations. The infinite loop likely occurs during DNS name compression decompression, DNAME/CNAME chain following, or recursive resolution without proper depth limits.
RemediationAI
Without vendor advisory links or patch version information provided in the data, specific remediation cannot be prescribed. General remediation steps include: (1) Identify all DNS resolver instances in your infrastructure (both authoritative nameservers and recursive resolvers); (2) Monitor official security advisories from your DNS implementation vendor (ISC, NLnet Labs, PowerDNS, etc.) for patch releases addressing CVE-2025-2962; (3) Apply vendor-supplied patches immediately upon availability, prioritizing production DNS infrastructure; (4) Implement query rate limiting and DNS firewall rules to mitigate infinite-loop triggering queries while patches are pending; (5) Monitor DNS service logs for signs of resource exhaustion or unusual query patterns. Contact your DNS software vendor directly for patch availability and timeline if not yet publicly available.
Sandbox escape in Kata Containers allowing guest VM to access host resources. CVSS 10.0 — undermines the core security g
Buffer overflow in Ayukov NFTP client 1.71 in SYST command handling allows remote FTP servers to execute arbitrary code
Buffer overflow in Prime95 29.8 build 6 user ID field allows code execution. PoC available.
Stack overflow in Domain Quester Pro 6.02 via SEH overwrite. PoC available.
Cyberoam Authentication Client 2.1.2.7 has a buffer overflow allowing remote attackers to execute code through the netwo
Kingdia CD Extractor 3.0.2 has a buffer overflow in the registration name field. PoC available.
Ether MP3 CD Burner 1.3.8 has buffer overflow in registration enabling bind shell on port 3110 via SEH overwrite. PoC av
Buffer overflow in WMV to AVI MPEG DVD Convertor 4.6.1217 allows code execution via crafted media files. PoC available.
Stack-based buffer overflow in Nsauditor Network Auditing Tool 3.0.28 and 3.2.1.0 in the DNS Lookup tool allows attacker
Buffer overflow in Zephyr RTOS dns_unpack_name() function causing OOB writes. PoC available.
Stack-based buffer overflow in Tenda RX3 firmware 16.03.13.11 allows authenticated remote attackers to achieve full syst
Remote code execution in Tenda F453 1.0.0.3 DNS firmware via a buffer overflow in the /goform/SetIpBind endpoint allows
Same technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today