CVE-2025-2838
CVSS 3.0 Score 6.5 of 10 (medium)
Details
Published Mar 26, 2025
Updated: Mar 27, 2025
CWE ID 835
Summary
CVE-2025-2838 is a Denial-of-Service (DoS) vulnerability affecting Silicon Labs Gecko OS. This issue arises from a logic error in DNS response processing, which can result in an infinite loop. Attackers can exploit this vulnerability by sending malformed DNS responses, leading to a DoS condition on the targeted system. No authentication is required to execute the attack. This vulnerability, identified as ZDI-CAN-23392, poses a significant risk for network-adjacent systems using Silicon Labs Gecko OS.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.