PT-2025-23832 · Amazon+1 · Freertos+1

Published 2025-06-04 · Updated 2025-10-14 · CVE-2025-5688

Positive Technologies (AI Summary)

CVSS v4.0

7.5

High

Base vector

AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description A buffer overflow issue has been identified, allowing out-of-bounds write when processing LLMNR or mDNS queries with very long DNS names. This issue affects systems using Buffer Allocation Scheme 1 with LLMNR or mDNS enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-5688

GHSA-5X4F-FVV8-WR65

Affected Products

Freertos

Freertos-Plus-Tcp

References · 13

• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-5x4f-fvv8-wr65 · Vendor Advisory
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.3.2 · Patch
• https://aws.amazon.com/security/security-bulletins/AWS-2025-012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5688 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5688 · Vendor Advisory
• https://twitter.com/cyberbessa/status/1930927973512737179 · Twitter Post
• https://twitter.com/eyalestrin/status/1931585027328061628 · Twitter Post
• https://twitter.com/fernandokarl/status/1930928165649580121 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1931284155351863399 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1930803115957400037 · Twitter Post
• https://twitter.com/CVEnew/status/1930317537687769439 · Twitter Post
• https://t.me/cveNotify/138620 · Telegram Post
• https://t.me/cvetracker/25427 · Telegram Post