Security Advisory

CVE-2025-36512

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-22 15:26:29
Last updated 2025-11-03 19:54:05
Assigner talos
State PUBLISHED

Description

A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.