Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-2900

IBM Semeru Runtime denial of service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Semeru Runtime 8.0.302.0 through 8.0.442.0, 11.0.12.0 through 11.0.26.0, 17.0.0.0 through 17.0.14.0, and 21.0.0.0 through 12.0.6.0 is vulnerable to a denial of service caused by a buffer overflow and subsequent crash, due to a defect in its native AES/CBC encryption implementation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Semeru Runtime

Default version status: unaffected

  • 8.0.302.0 to ≤ 8.0.442.0affected
  • 11.0.12.0 to ≤ 11.0.26.0affected
  • 17.0.0.0 to ≤ 17.0.14.0affected
  • 21.0.0.0 to ≤ 21.0.6.0affected

References