PT-2025-34149

🗓️ 20 Aug 2025 00:00:00Reported by Positive TechnologiesType

MadeYouReset: HTTP/2 DDoS flaw that exhausts resources by breaking max streams via malformed frames.

Reporter	Title	Published	Views	Family All 932
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse Jersey-client library that could cause critical SSL/TLS security configurations issues (CVE-2025-12383).	31 Jul 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	24 Mar 202613:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Input Validation in QOS.CH logback-core [CVE-2026-1225]	27 Feb 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Race Condition in Eclipse Jersey (Versions 2.45, 3.0.16, 3.1.9) May Bypass Critical SSL Configurations and Compromise Secure Connections, affects watsonx.data	17 Mar 202612:36	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Jetty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-5115)	27 Aug 202623:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the logback-core library that could allow denial-of-service through specially crafted inputs (CVE-2026-1225).	27 Mar 202600:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse http2-common library that could cause resource exhaustion (CVE-2025-5115).	1 Aug 202603:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing affected by a race condition in Eclipse Jersey (CVE-2025-12383)	10 Jun 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Eclipse Jersey might affect IBM Storage Defender Copy Data Management	12 Dec 202513:24	–	ibm

Source	Link
twitter	www.twitter.com/Cezar_H_Linux/status/1961106924344164514
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2025-5115
lists	www.lists.debian.org/debian-lts-announce/2025/09/msg00014.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-12383
twitter	www.twitter.com/VulmonFeeds/status/1958307223446151225
osv	www.osv.dev/vulnerability/SUSE-SU-2025:02993-2
osv	www.osv.dev/vulnerability/SUSE-SU-2025:02993-1
osv	www.osv.dev/vulnerability/ghsa-72hv-8253-57qq
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2025-5115

10 Oct 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.8

CVSS 3.17.5

CVSS 49.4

EPSS0.03566

SSVC