CVE-2025-62170

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-62170", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-10-07T16:12:03.425Z", "datePublished": "2025-10-13T17:45:21.365Z", "dateUpdated": "2025-10-27T16:11:53.120Z"}, "containers": {"cna": {"title": "rAthena map-server use-after-free vulnerability in RODEX", "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "lang": "en", "description": "CWE-416: Use After Free", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j"}, {"name": "https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d", "tags": ["x_refsource_MISC"], "url": "https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d"}], "affected": [{"vendor": "rathena", "product": "rathena", "versions": [{"version": "< af2f3ba33fc03dc6dd510f8cfe84cd9185af748d", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-10-13T17:45:21.365Z"}, "descriptions": [{"lang": "en", "value": "rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch."}], "source": {"advisory": "GHSA-9mj9-8vgv-r92j", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-27T16:11:27.822868Z", "id": "CVE-2025-62170", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-27T16:11:53.120Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-62170", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-27T16:11:27.822868Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-27T16:11:49.071Z"}}], "cna": {"title": "rAthena map-server use-after-free vulnerability in RODEX", "source": {"advisory": "GHSA-9mj9-8vgv-r92j", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "rathena", "product": "rathena", "versions": [{"status": "affected", "version": "< af2f3ba33fc03dc6dd510f8cfe84cd9185af748d"}]}], "references": [{"url": "https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j", "name": "https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d", "name": "https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416: Use After Free"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-10-13T17:45:21.365Z"}}}, "cveMetadata": {"cveId": "CVE-2025-62170", "state": "PUBLISHED", "dateUpdated": "2025-10-27T16:11:53.120Z", "dateReserved": "2025-10-07T16:12:03.425Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2025-10-13T17:45:21.365Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "rathena", "vendor": "rathena", "versions": [{"status": "affected", "version": "< af2f3ba33fc03dc6dd510f8cfe84cd9185af748d"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:rathena:rathena:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE156285-7E1C-46E1-A2CA-562FB8A9D664", "versionEndExcluding": "2025-10-12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch."}, {"lang": "es", "value": "rAthena es un servidor MMORPG de c\u00f3digo abierto multiplataforma. Una vulnerabilidad de uso despu\u00e9s de liberaci\u00f3n existe en la funcionalidad RODEX del map-server de rAthena en versiones anteriores al commit af2f3ba. Un atacante no autenticado puede explotar esta vulnerabilidad mediante un escenario de ataque espec\u00edfico para causar una denegaci\u00f3n de servicio al bloquear el map-server. Este problema ha sido parcheado en el commit af2f3ba. No se conocen soluciones alternativas aparte de aplicar manualmente el parche."}], "id": "CVE-2025-62170", "lastModified": "2026-10-19T16:10:00.260", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62170", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-27T16:11:27.822868Z", "version": "2.0.3"}}]}, "published": "2025-10-13T18:15:34.980", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"created": "2025-10-20T16:13:21.575929+00:00", "updated": "2025-10-20T16:13:21.575955+00:00", "vendors": ["rathena", "rathena$PRODUCT$rathena"]}