CVE-2025-2962— Infinite loop in dns_copy_qname
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-2962
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Infinite loop in dns_copy_qname
Source: CVE Program / CVE List V5
Vulnerability Description
A denial-of-service issue in the dns implemenation could cause an infinite loop.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不可达退出条件的循环(无限循环)
Source: CVE Program / CVE List V5
Vulnerability Title
Zephyr 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Zephyr是Zephyr开源的一个可扩展的实时操作系统 (RTOS)。 Zephyr 4.1及之前版本存在安全漏洞，该漏洞源于DNS实现存在缺陷，可能导致无限循环。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| zephyrproject-rtos | Zephyr | * ~ 4.1.0 | - |
II. Public POCs for CVE-2025-2962
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-2962
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-2962 (1)
IV. Related Vulnerabilities
Same product: Zephyr
- CVE-2026-12519
Out-of-bounds stack read and write in Zephyr WNC-M14A2A mode - CVE-2026-9771
Missing device-pointer validation in flash_copy() syscall al - CVE-2026-12630
6LoWPAN IPHC uncompression out-of-bounds read on reserved de - CVE-2026-12629
PL011 UART error interrupts never cleared, enabling an exter - CVE-2026-12366
Use-after-free freeing an armed dynamically-allocated k_time
Same vendor: zephyrproject-rtos
- CVE-2026-13351
net: Maliciously fragmented IPv6 packets can prevent receivi - CVE-2026-5068
bt: l2cap le coc: remote oob write via seg counter stored in - CVE-2026-5067
Out-of-bounds read/write in HTTP WebSocket upgrade via non-n - CVE-2026-5066
net: sockets: tls: Potential out-of-bounds write/read in soc - CVE-2026-5589
Out-of-bounds write caused by an integer underflow in the Bl
Same weakness: CWE-835
- CVE-2026-12629
PL011 UART error interrupts never cleared, enabling an exter - CVE-2026-68762
JetBrains Ktor 3.4.1前 WebSocket解压缩拒绝服务漏洞 - CVE-2026-13002
Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap - CVE-2026-17004
IBM i is Affected By Multiple Vulnerabilities in Host Server - CVE-2026-17229
IBM i is Affected By Multiple Vulnerabilities in Host Server
V. Comments for CVE-2025-2962
No comments yet