64 changes (56 new | 8 updated):

- 56 new CVEs: CVE-2025-21179, CVE-2025-21181, CVE-2025-21182, CVE-2025-21183, CVE-2025-21184, CVE-2025-21188, CVE-2025-21190, CVE-2025-21194, CVE-2025-21198, CVE-2025-21200, CVE-2025-21201, CVE-2025-21206, CVE-2025-21208, CVE-2025-21212, CVE-2025-21216, CVE-2025-21254, CVE-2025-21259, CVE-2025-21322, CVE-2025-21337, CVE-2025-21347, CVE-2025-21349, CVE-2025-21350, CVE-2025-21351, CVE-2025-21352, CVE-2025-21358, CVE-2025-21359, CVE-2025-21367, CVE-2025-21368, CVE-2025-21369, CVE-2025-21371, CVE-2025-21373, CVE-2025-21375, CVE-2025-21376, CVE-2025-21377, CVE-2025-21379, CVE-2025-21381, CVE-2025-21383, CVE-2025-21386, CVE-2025-21387, CVE-2025-21390, CVE-2025-21391, CVE-2025-21392, CVE-2025-21394, CVE-2025-21397, CVE-2025-21400, CVE-2025-21406, CVE-2025-21407, CVE-2025-21410, CVE-2025-21414, CVE-2025-21418, CVE-2025-21419, CVE-2025-21420, CVE-2025-24036, CVE-2025-24039, CVE-2025-24042, CVE-2025-26495 - 8 updated CVEs: CVE-2025-21177, CVE-2025-21253, CVE-2025-21267, CVE-2025-21279, CVE-2025-21283, CVE-2025-21342, CVE-2025-21404, CVE-2025-21408
athu-tran · Feb 11, 2025 · 745055c · 745055c
1 parent d5da292
commit 745055c
Show file tree

Hide file tree

Showing 64 changed files with 22,300 additions and 18 deletions.
diff --git a/cves/2025/21xxx/CVE-2025-21177.json b/cves/2025/21xxx/CVE-2025-21177.json
@@ -8,7 +8,7 @@
         "assignerShortName": "microsoft",
         "dateReserved": "2024-12-05T21:43:30.761Z",
         "datePublished": "2025-02-06T22:41:32.021Z",
-        "dateUpdated": "2025-02-07T15:58:51.921Z"
+        "dateUpdated": "2025-02-11T17:58:21.411Z"
     },
     "containers": {
         "cna": {
@@ -67,7 +67,7 @@
             "providerMetadata": {
                 "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
                 "shortName": "microsoft",
-                "dateUpdated": "2025-02-06T22:41:32.021Z"
+                "dateUpdated": "2025-02-11T17:58:21.411Z"
             },
             "references": [
                 {

diff --git a/cves/2025/21xxx/CVE-2025-21179.json b/cves/2025/21xxx/CVE-2025-21179.json
@@ -0,0 +1,146 @@
+{
+    "dataType": "CVE_RECORD",
+    "dataVersion": "5.1",
+    "cveMetadata": {
+        "cveId": "CVE-2025-21179",
+        "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
+        "state": "PUBLISHED",
+        "assignerShortName": "microsoft",
+        "dateReserved": "2024-12-05T21:43:30.761Z",
+        "datePublished": "2025-02-11T17:58:40.108Z",
+        "dateUpdated": "2025-02-11T17:58:40.108Z"
+    },
+    "containers": {
+        "cna": {
+            "title": "DHCP Client Service Denial of Service Vulnerability",
+            "datePublic": "2025-02-11T08:00:00.000Z",
+            "cpeApplicability": [
+                {
+                    "nodes": [
+                        {
+                            "operator": "OR",
+                            "negate": false,
+                            "cpeMatch": [
+                                {
+                                    "vulnerable": true,
+                                    "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
+                                    "versionStartIncluding": "10.0.26100.0",
+                                    "versionEndExcluding": "10.0.26100.3194"
+                                },
+                                {
+                                    "vulnerable": true,
+                                    "criteria": "cpe:2.3:o:microsoft:windows_11_24H2:*:*:*:*:*:*:arm64:*",
+                                    "versionStartIncluding": "10.0.26100.0",
+                                    "versionEndExcluding": "10.0.26100.3194"
+                                },
+                                {
+                                    "vulnerable": true,
+                                    "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",
+                                    "versionStartIncluding": "10.0.26100.0",
+                                    "versionEndExcluding": "10.0.26100.3194"
+                                }
+                            ]
+                        }
+                    ]
+                }
+            ],
+            "affected": [
+                {
+                    "vendor": "Microsoft",
+                    "product": "Windows Server 2025 (Server Core installation)",
+                    "platforms": [
+                        "x64-based Systems"
+                    ],
+                    "versions": [
+                        {
+                            "version": "10.0.26100.0",
+                            "lessThan": "10.0.26100.3194",
+                            "versionType": "custom",
+                            "status": "affected"
+                        }
+                    ]
+                },
+                {
+                    "vendor": "Microsoft",
+                    "product": "Windows 11 Version 24H2",
+                    "platforms": [
+                        "ARM64-based Systems",
+                        "x64-based Systems"
+                    ],
+                    "versions": [
+                        {
+                            "version": "10.0.26100.0",
+                            "lessThan": "10.0.26100.3194",
+                            "versionType": "custom",
+                            "status": "affected"
+                        }
+                    ]
+                },
+                {
+                    "vendor": "Microsoft",
+                    "product": "Windows Server 2025",
+                    "platforms": [
+                        "x64-based Systems"
+                    ],
+                    "versions": [
+                        {
+                            "version": "10.0.26100.0",
+                            "lessThan": "10.0.26100.3194",
+                            "versionType": "custom",
+                            "status": "affected"
+                        }
+                    ]
+                }
+            ],
+            "descriptions": [
+                {
+                    "value": "DHCP Client Service Denial of Service Vulnerability",
+                    "lang": "en-US"
+                }
+            ],
+            "problemTypes": [
+                {
+                    "descriptions": [
+                        {
+                            "description": "CWE-125: Out-of-bounds Read",
+                            "lang": "en-US",
+                            "type": "CWE",
+                            "cweId": "CWE-125"
+                        }
+                    ]
+                }
+            ],
+            "providerMetadata": {
+                "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
+                "shortName": "microsoft",
+                "dateUpdated": "2025-02-11T17:58:40.108Z"
+            },
+            "references": [
+                {
+                    "name": "DHCP Client Service Denial of Service Vulnerability",
+                    "tags": [
+                        "vendor-advisory"
+                    ],
+                    "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21179"
+                }
+            ],
+            "metrics": [
+                {
+                    "format": "CVSS",
+                    "scenarios": [
+                        {
+                            "lang": "en-US",
+                            "value": "GENERAL"
+                        }
+                    ],
+                    "cvssV3_1": {
+                        "version": "3.1",
+                        "baseSeverity": "MEDIUM",
+                        "baseScore": 4.8,
+                        "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"
+                    }
+                }
+            ]
+        }
+    }
+}