[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI09VgMjBoMEdGQB7DRVcEKVgzlQZqchNrv8Y8xv_VOc":3,"g5a-risk:CVE-2025-59348":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":33,"affectedProducts":34,"affectedProductsCount":40,"references":41,"referencesCount":52,"weaknesses":53,"weaknessesCount":40,"isActivelyExploited":62,"cisaInfo":26,"otxData":26,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":98,"notableEvents":99},"CVE-2025-59348","What is CVE-2025-59348?","Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not update the structure’s usedTraffic field, because an uninitialized variable n is used as a guard to the AddTraffic method call, instead of the result.Size variable. A task is processed by a peer. The usedTraffic metadata is not updated during the processing. Rate limiting is incorrectly applied, leading to a denial-of-service condition for the peer. This vulnerability is fixed in 2.1.0.","Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the processPieceFromSource method does not update the ...","2025-09-17T20:15:37.04","2025-09-18T20:18:46.437",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[],[],0.00358,[31,31,31,31,31,31,31],"High",[35],{"vendor":36,"product":37,"version":38,"criteria":39,"vulnerable":4},"linuxfoundation","dragonfly","*","cpe:2.3:a:linuxfoundation:dragonfly:*:*:*:*:*:go:*:*",1,[42,47],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fgithub.com\u002Fdragonflyoss\u002Fdragonfly\u002Fblob\u002Fmain\u002Fdocs\u002Fsecurity\u002Fdragonfly-comprehensive-report-2023.pdf","GitHub",[46],"Product",{"url":48,"source":44,"tags":49},"https:\u002F\u002Fgithub.com\u002Fdragonflyoss\u002Fdragonfly\u002Fsecurity\u002Fadvisories\u002FGHSA-2qgr-gfvj-qpcr",[50,51],"Patch","Third Party Advisory",2,[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-457","Use of Uninitialized Variable","The code uses a variable that has not been initialized, leading to unpredictable or unintended results.","In some languages such as C and C++, stack variables are not initialized by default. They generally contain junk data with the contents of stack memory before the function was invoked. An attacker can sometimes control or read these contents. In other languages or conditions, a variable that is not explicitly initialized can be given a default value that has security implications, depending on the logic of the program. The presence of an uninitialized variable can sometimes indicate a typographic error in the code.","Draft","Variant","Simple",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2025-59348? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-59348, a high severity cyber security vulnerability from 2025. Dragonfly is an open source P2P-based file distribution and...","CVE-2025-59348, CVE-2025-59348 vulnerability, CVE-2025-59348 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, linuxfoundation security, dragonfly vulnerability","\u002Fwhat-is\u002Fcve-2025-59348",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-59348","Cybersecurity","CVE-2025-59348, CVE-2025-59348 vulnerability, CVE-2025-59348 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":26,"Negate":26,"Nodes":91},[92],{"Operator":93,"Negate":62,"CPEMatch":94},"OR",[95],{"Vulnerable":4,"Criteria":39,"MatchCriteriaID":96,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":97,"VersionEndIncluding":26},"DD8FC947-C416-45E5-8B5A-0173CDA235B6","2.1.0",[],[100],{"id":101,"eventType":102,"eventTime":103,"details":104,"label":105,"color":106},"d4d567dc-9e98-41d9-a56a-2bf4c8a46b27","NEW_NVD","2025-09-18T04:01:04.270219+00:00","New CVE added to NVD","Published to NVD","blue",{"lastModified":11,"cacheTime":108,"version":109},1792436127463,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},48,"Medium","Plan remediation","2026-10-16T07:08:56.739844+00:00"]