Approved changes feed: RSS · Atom
cpe:2.3:a:bloomberg:comdb2:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bloomberg (e177c2b9-cfba-53fd-ba48-4ac7ba7f8741) |
|---|---|
| Product | Comdb2 (3789c234-fe1c-554c-b928-9ca52d10db8d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bloomberg/comdb2 |
purl2cpe | 2026-06-01 10:16:24.630550 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48498 |
vulnerable | 2026-06-08 07:27:16.002450 |
Details available
HIGH (7.5)
A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
Published: 2025-07-22T15:26:31.314Z
Updated: 2025-11-03T20:04:53.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46354 |
vulnerable | 2026-06-08 07:27:08.098907 |
Details available
HIGH (7.5)
A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Published: 2025-07-22T15:26:32.910Z
Updated: 2025-11-03T20:04:25.328Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36520 |
vulnerable | 2026-06-08 07:21:01.829664 |
Details available
HIGH (7.5)
A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability.
Published: 2025-07-22T15:26:34.557Z
Updated: 2025-11-03T19:54:06.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36512 |
vulnerable | 2026-06-08 07:21:01.820284 |
Details available
HIGH (7.5)
A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
Published: 2025-07-22T15:26:29.880Z
Updated: 2025-11-03T19:54:05.440Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35966 |
vulnerable | 2026-06-08 07:21:00.187692 |
Details available
HIGH (7.5)
A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
Published: 2025-07-22T15:26:28.550Z
Updated: 2025-11-03T19:54:01.471Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.