Bloomberg Comdb2 null pointer dereference and denial-of-service vulnerabilities

Summary: Cisco Talos disclosed five vulnerabilities in Bloomberg's open source Comdb2 8.1 database, including three null pointer dereferences: TALOS-2025-2197 (CVE-2025-36520) and TALOS-2025-2201 (CVE-2025-35966) in protocol buffer message handling, and TALOS-2025-2199 (CVE-2025-48498) in the distributed transaction component. An attacker can connect to a database instance over TCP and send a crafted message or network packet to trigger a denial of service, and the vendor has patched the vulnerabilities.
Bottom line: A single crafted TCP message to a Comdb2 instance is enough to take it down, so any database reachable on the network is a candidate for a denial-of-service attack that requires no credentials.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-35966 CVE-2025-36520 CVE-2025-48498
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026