CVE-2022-41404

Опубликовано: 11 окт. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Ссылки

https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2022/CVE-2022-41404
https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html
Mailing List
Third Party Advisory
https://sourceforge.net/p/ini4j/bugs/56/
Exploit
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html
Mailing List
Third Party Advisory
https://sourceforge.net/p/ini4j/bugs/56/
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ini4j_project:ini4j:*:*:*:*:*:*:*:*

Версия до 0.5.4 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00595

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-400

Связанные уязвимости

CVE-2022-41404

CVSS3: 7.5

ubuntu

больше 3 лет назад

An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVE-2022-41404

CVSS3: 7.5

redhat

больше 3 лет назад

An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

CVE-2022-41404

CVSS3: 7.5

debian

больше 3 лет назад

An issue in the fetch() method in the BasicProfile class of org.ini4j ...

GHSA-jr6h-r7vg-f9mc

CVSS3: 7.5

github

больше 3 лет назад

org.ini4j allows attackers to cause a Denial of Service (DoS)

EPSS

Процентиль: 69%

0.00595

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-400