CVE Details
Basic Information
| Title | CVE-2025-36512 |
|---|---|
| Type | cve |
| Published | 2025-07-22T15:26:29.880Z |
| Modified | 2025-07-22T15:26:29.880Z |
Product Information
| Vendor | Bloomberg |
|---|---|
| Product | Comdb2 |
| Version | 8.1 |
CVSS Information
| Base Score | 7.5 (HIGH) |
|---|---|
| Attack Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Affected Products
- Bloomberg Comdb2 8.1
Additional Information
| CWE List | CWE-617 |
|---|---|
| Source | talos |
Description
A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.