CNNVD-202510-2427 Information

CNNVD ID

CNNVD-202510-2427

CVE-2025-55092

  • CNNVD Published: 2025-10-17

Description (Chinese)

Eclipse ThreadX NetX Duo是Eclipse ThreadX开源的一个 IPv4 和 IPv6 双重网络堆栈。 Eclipse ThreadX NetX Duo 6.4.4之前版本存在安全漏洞,该漏洞源于处理带有时间戳选项的IPv4数据包时可能导致越界读取。

Description (English)

Eclipse ThreadX NetX Duo is a dual IPv4 and IPv6 network stack of Eclipse ThreadX open sources. Eclipse ThreadX NetX Duo 6.4.4 contains a security loophole that arises from the potential for cross-border reading when processing IPv4 data packages with time stamp options.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Eclipse ThreadX

Published

2025-10-17

Last Modified

2026-02-24

References

https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-vwh7-h99r-fvwq https://access.redhat.com/security/cve/cve-2025-55092

Patch

https://github.com/eclipse-threadx/netxduo/releases

Share on: