Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Bloomberg |
|
No data.
No data.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-22324 | A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability. |
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Mon, 03 Nov 2025 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 22 Aug 2025 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Bloomberg
Bloomberg comdb2 |
|
| CPEs | cpe:2.3:a:bloomberg:comdb2:8.1:*:*:*:*:*:*:* | |
| Vendors & Products |
Bloomberg
Bloomberg comdb2 |
Wed, 23 Jul 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 22 Jul 2025 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability. | |
| Weaknesses | CWE-476 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: talos
Published:
Updated: 2025-11-03T20:04:53.548Z
Reserved: 2025-05-22T16:04:45.982Z
Link: CVE-2025-48498
Vulnrichment
Updated: 2025-11-03T20:04:53.548Z
NVD
Status : Modified
Published: 2025-07-22T16:15:29.877
Modified: 2025-11-03T20:19:07.070
Link: CVE-2025-48498
Redhat
No data.
OpenCVE Enrichment
No data.