{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T06:39:13.496","vulnerabilities":[{"cve":{"id":"CVE-2025-2838","sourceIdentifier":"zdi-disclosures@trendmicro.com","published":"2025-03-26T22:15:15.803","lastModified":"2026-06-17T09:07:42.590","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Silicon Labs Gecko OS DNS Response Processing Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to create a denial-of-service condition on affected installations of Silicon Labs Gecko OS. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the processing of DNS responses. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-23392."},{"lang":"es","value":"Vulnerabilidad de denegación de servicio por bucle infinito en el procesamiento de respuestas DNS de Silicon Labs Gecko OS. Esta vulnerabilidad permite a atacantes adyacentes a la red crear una condición de denegación de servicio en las instalaciones afectadas de Silicon Labs Gecko OS. No se requiere autenticación para explotar esta vulnerabilidad. La falla específica se encuentra en el procesamiento de respuestas DNS. El problema se debe a un error lógico que puede generar un bucle infinito. Un atacante puede aprovechar esta vulnerabilidad para crear una condición de denegación de servicio en el sistema. Anteriormente, se denominaba ZDI-CAN-23392."}],"affected":[{"source":"zdi-disclosures@trendmicro.com","affectedData":[{"vendor":"Silicon Labs","product":"Gecko OS","defaultStatus":"unknown","versions":[{"version":"1.0.46","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-27T14:52:02.744978Z","id":"CVE-2025-2838","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"zdi-disclosures@trendmicro.com","type":"Secondary","description":[{"lang":"en","value":"CWE-835"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:silabs:gecko_os:1.0.46:*:*:*:*:*:*:*","matchCriteriaId":"5166FBAB-BD1A-4879-A14C-0C49A5604E1D"}]}]}],"references":[{"url":"https://community.silabs.com/a45Vm0000000Atp","source":"zdi-disclosures@trendmicro.com","tags":["Permissions Required"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-24-872/","source":"zdi-disclosures@trendmicro.com","tags":["Third Party Advisory"]}]}}]}