Boletines de Vulnerabilidades

CVE-2025-10225

   
Software afectado OPENSSL
 
Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-10225