CVE-2025-0695 - An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input

Back Back to CVE browser

MEDIUM

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input

Published Jan 27, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.36%

Description

An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input.

Affected products

Vendor Cesanta Product Frozen Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <1.7

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cesanta

Frozen

unaffected

Version	Status	Constraints
0	affected	<1.7

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1818		Advisory
https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-0695

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Nozomi

Published Jan 27, 2025

Updated Feb 12, 2025

Reserved Jan 24, 2025

Link CVE-2025-0695

CISA Vulnrichment

Updated Jan 27, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-0695

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-0695

ENISA EUVD

Assigner Nozomi

Published Jan 27, 2025

Updated Feb 12, 2025

Exploited since n/a

Link EUVD-2025-1818

EUVD-2025-1818