In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS). There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
References
| Link | Resource |
|---|---|
| https://my.f5.com/manage/s/article/K000149959 | Vendor Advisory |
Configurations
History
10 Apr 2025, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
05 Mar 2025, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
F5 nginx
F5 |
|
| CPE | cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:* | |
| References | () https://my.f5.com/manage/s/article/K000149959 - Vendor Advisory |
04 Mar 2025, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-04 01:15
Updated : 2025-04-10 18:55
NVD link : CVE-2025-1695
Mitre link : CVE-2025-1695
JSON object : View
Products Affected
f5
- nginx
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')