CVE-2025-62170

{
  "id": "CVE-2025-62170",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-13T18:15:34.980",
  "lastModified": "2026-10-19T16:10:00.260",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "rAthena is an open-source cross-platform MMORPG server. A use-after-free vulnerability exists in the RODEX functionality of rAthena's map-server in versions prior to commit af2f3ba. An unauthenticated attacker can exploit this vulnerability via a specific attacking scenario to cause a denial of service by crashing the map-server. This issue has been patched in commit af2f3ba. There are no known workarounds aside from manually applying the patch."
    },
    {
      "lang": "es",
      "value": "rAthena es un servidor MMORPG de código abierto multiplataforma. Una vulnerabilidad de uso después de liberación existe en la funcionalidad RODEX del map-server de rAthena en versiones anteriores al commit af2f3ba. Un atacante no autenticado puede explotar esta vulnerabilidad mediante un escenario de ataque específico para causar una denegación de servicio al bloquear el map-server. Este problema ha sido parcheado en el commit af2f3ba. No se conocen soluciones alternativas aparte de aplicar manualmente el parche."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "rathena",
          "product": "rathena",
          "versions": [
            {
              "version": "< af2f3ba33fc03dc6dd510f8cfe84cd9185af748d",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-27T16:11:27.822868Z",
          "id": "CVE-2025-62170",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:rathena:rathena:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "2025-10-12",
              "matchCriteriaId": "EE156285-7E1C-46E1-A2CA-562FB8A9D664"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/rathena/rathena/commit/af2f3ba33fc03dc6dd510f8cfe84cd9185af748d",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/rathena/rathena/security/advisories/GHSA-9mj9-8vgv-r92j",
      "source": "[email protected]",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}