CVE-2023-6481

Опубликовано: 04 дек. 2023

Источник: nvd

CVSS3: 7.1

CVSS3: 7.5

EPSS Низкий

Описание

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

Ссылки

https://logback.qos.ch/news.html#1.3.12
Release Notes
https://logback.qos.ch/news.html#1.3.14
Release Notes
https://logback.qos.ch/news.html#1.3.12
Release Notes
https://logback.qos.ch/news.html#1.3.14
Release Notes

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qos:logback:1.2.12:*:*:*:*:*:*:*

cpe:2.3:a:qos:logback:1.3.13:*:*:*:*:*:*:*

cpe:2.3:a:qos:logback:1.4.13:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00224

Низкий

7.1 High

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-6481

CVSS3: 7.1

ubuntu

около 2 лет назад

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

CVE-2023-6481

CVSS3: 7.5

redhat

около 2 лет назад

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

CVE-2023-6481

CVSS3: 7.1

debian

около 2 лет назад

A serialization vulnerability in logback receiver component part of l ...

GHSA-gm62-rw4g-vrc4

CVSS3: 7.1

github

около 2 лет назад

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

EPSS

Процентиль: 45%

0.00224

Низкий

7.1 High

CVSS3

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo