CVE-2008-7227

Опубликовано: 14 сент. 2009

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:geoserver:geoserver:*:beta4:*:*:*:*:*:*

Версия до 1.6.0 (включая)

cpe:2.3:a:geoserver:geoserver:1.3.0:*:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.0:beta:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.0:pr1:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.0:rc2:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.0:rc4:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.0:rc6:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.0:rc7:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.4.0:m0:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.4.0:m1:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.0:beta2:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.0:rc3:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.0:rc4:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.1:rc1:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.6.0:*:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.6.0:beta1:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.6.0:beta2:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.6.0:rc1:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.6.0:rc2:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.6.0:rc3:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:1.7.0:beta1:*:*:*:*:*:*

cpe:2.3:a:geoserver:geoserver:3.0:beta3:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00305

Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-8hmh-mhqv-7638

github

больше 3 лет назад

PartialBufferOutputStream2 flush issues