In breve
- CVE-2025-43915 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda github.com/linkerd/linkerd2, buoyant (linkerd), linkerd (linkerd).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.33%, superiore al 26.2% delle vulnerabilità.
- Correzione: aggiornare a 0.0.0-20250212165942-faa3f617eef5, 2.16.5, 2.17.2, 25.2.1 o successiva.
| Package | Affected versions | Patched versions |
|---|
| github.com/linkerd/linkerd2 Go | < 0.0.0-20250212165942-faa3f617eef5all versions
| 0.0.0-20250212165942-faa3f617eef5
|
| buoyant | ≥ 2.13.0, ≤ 2.13.7≥ 2.14.0, ≤ 2.14.10≥ 2.15.0, ≤ 2.15.7≥ 2.16.0, < 2.16.5≥ 2.17.0, < 2.17.2
| 2.16.52.17.2
|
| linkerd | < 25.2.1
| 25.2.1
|
Description
In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.
NVD description
In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics.
Altre vulnerabilità di github.com/linkerd/linkerd2
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free