Описание
An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout of the address space to be included into a deserialized data structure, which may potentially lead to thread crashes or cause denial of service conditions.
Ссылки
- Patch
- ExploitVendor Advisory
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.10.5 (исключая)
cpe:2.3:a:eclipse:cyclone_data_distribution_service:*:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01078
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-191
Связанные уязвимости
CVSS3: 9.1
ubuntu
11 месяцев назад
An integer underflow during deserialization may allow any unauthenticated user to read out of bounds heap memory. This may result into secret data or pointers revealing the layout of the address space to be included into a deserialized data structure, which may potentially lead to thread crashes or cause denial of service conditions.
EPSS
Процентиль: 77%
0.01078
Низкий
9.1 Critical
CVSS3
Дефекты
CWE-191