{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2025-43915","sourceIdentifier":"cve@mitre.org","published":"2025-05-05T17:18:49.603","lastModified":"2026-06-17T09:24:44.027","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"In Linkerd edge releases before edge-25.2.1, and Buoyant Enterprise for Linkerd releases 2.13.0–2.13.7, 2.14.0–2.14.10, 2.15.0–2.15.7, 2.16.0–2.16.4, and 2.17.0–2.17.1, resource exhaustion can occur for Linkerd proxy metrics."},{"lang":"es","value":"En las versiones de Buoyant Edge anteriores a edge-25.2.1 y en Enterprise para Linkerd versiones 2.16.* anteriores a 2.16.5, 2.17.* anteriores a 2.17.2 y 2.18.* anteriores a 2.18.0, se pueden producir agotamiento de los recursos para las métricas de proxy de Linkerd."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":4.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-05-05T17:27:43.994614Z","id":"CVE-2025-43915","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-400"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*","versionStartIncluding":"2.13.0","versionEndIncluding":"2.13.7","matchCriteriaId":"C9742371-D40C-41C4-B2BF-549DFD744D25"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*","versionStartIncluding":"2.14.0","versionEndIncluding":"2.14.10","matchCriteriaId":"50AC0938-14D0-4C9F-91A2-AE672D698440"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*","versionStartIncluding":"2.15.0","versionEndIncluding":"2.15.7","matchCriteriaId":"DFA5823A-8764-4DA2-B581-98C81EB8595C"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*","versionStartIncluding":"2.16.0","versionEndExcluding":"2.16.5","matchCriteriaId":"4958DFE3-9F0F-4B67-9BBC-F94D3A006DFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkerd:buoyant:*:*:*:*:enterprise:linkerd:*:*","versionStartIncluding":"2.17.0","versionEndExcluding":"2.17.2","matchCriteriaId":"23536DA5-20CE-4B36-BB34-5487C7CFF3E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:linkerd:linkerd:*:*:*:*:edge:kubernetes:*:*","versionEndExcluding":"25.2.1","matchCriteriaId":"345C63E1-3AC0-4698-9066-DCD4B3DCD8E4"}]}]}],"references":[{"url":"https://docs.buoyant.io/security/advisories/2025-01/","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://www.buoyant.io/resources","source":"cve@mitre.org","tags":["Product"]}]}}