> CVE-2025-5941

« BACK_TO_HOME
PUBLISHED
2025-08-14 05:15
MODIFIED
2025-08-14 13:11
EPSS (Prob. Exploit)
0.12%
Top 98.0%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04

> DESCRIPTION

Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the machine, based on the exact configuration. A successful exploit can potentially result in user-controllable memory being leaked in a domain name stored on the local machine.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-jq43-27x9-3v86 HIGH

Netty has SMTP Command Injection Vulnerability that Allows Email Forgery

AFFECTED PACKAGES:
MAVEN / io.netty:netty-codec-smtp
< 4.1.128.Final
Fixed in: 4.1.128.Final
MAVEN / io.netty:netty-codec-smtp
>= 4.2.0.Alpha1, < 4.2.7.Final
Fixed in: 4.2.7.Final

> HISTORIQUE DES MODIFICATIONS

Première apparition
14/08/2025 05:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:07
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME