CVE-2025-53114

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-53114", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-06-25T13:41:23.088Z", "datePublished": "2026-06-18T16:25:47.388Z", "dateUpdated": "2026-06-18T17:33:39.552Z"}, "containers": {"cna": {"title": "CometD has acknowledgement extension out of memory", "problemTypes": [{"descriptions": [{"cweId": "CWE-400", "lang": "en", "description": "CWE-400: Uncontrolled Resource Consumption", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59"}, {"name": "https://github.com/cometd/cometd/issues/2117", "tags": ["x_refsource_MISC"], "url": "https://github.com/cometd/cometd/issues/2117"}, {"name": "https://github.com/cometd/cometd/pull/2118", "tags": ["x_refsource_MISC"], "url": "https://github.com/cometd/cometd/pull/2118"}, {"name": "https://github.com/cometd/cometd/pull/2168", "tags": ["x_refsource_MISC"], "url": "https://github.com/cometd/cometd/pull/2168"}, {"name": "https://github.com/cometd/cometd/pull/2169", "tags": ["x_refsource_MISC"], "url": "https://github.com/cometd/cometd/pull/2169"}, {"name": "https://github.com/cometd/cometd/discussions/2116", "tags": ["x_refsource_MISC"], "url": "https://github.com/cometd/cometd/discussions/2116"}], "affected": [{"vendor": "cometd", "product": "cometd", "versions": [{"version": ">= 5.0.0, < 5.0.23", "status": "affected"}, {"version": ">= 6.0.0, < 6.0.19", "status": "affected"}, {"version": ">= 7.0.0, < 7.0.19", "status": "affected"}, {"version": ">= 8.0.0, < 8.0.9", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-18T16:25:47.388Z"}, "descriptions": [{"lang": "en", "value": "CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement extension may cause the unacknowledged message queue to grow indefinitely, eventually causing an `OutOfMemoryError`. Versions 5.0.23, 6.0.19, 7.0.19, and 8.0.9 patch the issue. As a workaround, disable the acknowledgement extension."}], "source": {"advisory": "GHSA-cqgj-h8vf-4w59", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-18T17:30:58.888648Z", "id": "CVE-2025-53114", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-18T17:33:39.552Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-53114", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-18T17:30:58.888648Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-18T17:31:30.370Z"}}], "cna": {"title": "CometD has acknowledgement extension out of memory", "source": {"advisory": "GHSA-cqgj-h8vf-4w59", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "cometd", "product": "cometd", "versions": [{"status": "affected", "version": ">= 5.0.0, < 5.0.23"}, {"status": "affected", "version": ">= 6.0.0, < 6.0.19"}, {"status": "affected", "version": ">= 7.0.0, < 7.0.19"}, {"status": "affected", "version": ">= 8.0.0, < 8.0.9"}]}], "references": [{"url": "https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59", "name": "https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/cometd/cometd/issues/2117", "name": "https://github.com/cometd/cometd/issues/2117", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cometd/cometd/pull/2118", "name": "https://github.com/cometd/cometd/pull/2118", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cometd/cometd/pull/2168", "name": "https://github.com/cometd/cometd/pull/2168", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cometd/cometd/pull/2169", "name": "https://github.com/cometd/cometd/pull/2169", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cometd/cometd/discussions/2116", "name": "https://github.com/cometd/cometd/discussions/2116", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement extension may cause the unacknowledged message queue to grow indefinitely, eventually causing an `OutOfMemoryError`. Versions 5.0.23, 6.0.19, 7.0.19, and 8.0.9 patch the issue. As a workaround, disable the acknowledgement extension."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "CWE-400: Uncontrolled Resource Consumption"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-06-18T16:25:47.388Z"}}}, "cveMetadata": {"cveId": "CVE-2025-53114", "state": "PUBLISHED", "dateUpdated": "2026-06-18T17:33:39.552Z", "dateReserved": "2025-06-25T13:41:23.088Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-06-18T16:25:47.388Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "cometd", "vendor": "cometd", "versions": [{"status": "affected", "version": ">= 5.0.0, < 5.0.23"}, {"status": "affected", "version": ">= 6.0.0, < 6.0.19"}, {"status": "affected", "version": ">= 7.0.0, < 7.0.19"}, {"status": "affected", "version": ">= 8.0.0, < 8.0.9"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "CometD is a scalable comet implementation for web messaging. In versions 5.0.0 through 5.0.22, 6.0.0 through 6.0.18, 7.0.0 through 7.0.18, and 8.0.0 through 8.0.8, bad clients that always send a fixed batch value when the server is using the acknowledgement extension may cause the unacknowledged message queue to grow indefinitely, eventually causing an `OutOfMemoryError`. Versions 5.0.23, 6.0.19, 7.0.19, and 8.0.9 patch the issue. As a workaround, disable the acknowledgement extension."}, {"lang": "es", "value": "CometD es una implementaci\u00f3n comet escalable para mensajer\u00eda web. En las versiones 5.0.0 a 5.0.22, 6.0.0 a 6.0.18, 7.0.0 a 7.0.18 y 8.0.0 a 8.0.8, los clientes defectuosos que siempre env\u00edan un valor de lote fijo cuando el servidor est\u00e1 utilizando la extensi\u00f3n de acuse de recibo pueden hacer que la cola de mensajes no reconocidos crezca indefinidamente, lo que eventualmente causa un 'OutOfMemoryError'. Las versiones 5.0.23, 6.0.19, 7.0.19 y 8.0.9 parchean el problema. Como soluci\u00f3n alternativa, deshabilite la extensi\u00f3n de acuse de recibo."}], "id": "CVE-2025-53114", "lastModified": "2026-10-12T22:10:00.247", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-53114", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-18T17:30:58.888648Z", "version": "2.0.3"}}]}, "published": "2026-06-18T17:16:27.150", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/cometd/cometd/discussions/2116"}, {"source": "security-advisories@github.com", "url": "https://github.com/cometd/cometd/issues/2117"}, {"source": "security-advisories@github.com", "url": "https://github.com/cometd/cometd/pull/2118"}, {"source": "security-advisories@github.com", "url": "https://github.com/cometd/cometd/pull/2168"}, {"source": "security-advisories@github.com", "url": "https://github.com/cometd/cometd/pull/2169"}, {"source": "security-advisories@github.com", "url": "https://github.com/cometd/cometd/security/advisories/GHSA-cqgj-h8vf-4w59"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[5.0.0,5.0.23)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.0.0,6.0.19)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[7.0.0,7.0.19)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[8.0.0,8.0.9)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "cometd", "source": "cna", "vendor": "cometd"}, "product": "cometd", "vendor": "cometd"}], "created": "2026-06-18T17:45:13.103574+00:00", "updated": "2026-06-18T18:00:11.166358+00:00", "vendors": ["cometd", "cometd$PRODUCT$cometd"]}