Описание
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
A null pointer exception vulnerability was found in Threeten Backport. If the other parameter is null in ChronoLocalDate, a NullPointerException is thrown.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Logging Subsystem for Red Hat OpenShift | org.elasticsearch-elasticsearch | Not affected | ||
| OpenShift Serverless | threetenbp | Not affected | ||
| Red Hat build of Apache Camel 4 for Quarkus 3 | threetenbp | Not affected | ||
| Red Hat build of Apache Camel for Spring Boot 3 | threetenbp | Out of support scope | ||
| Red Hat Data Grid 8 | threetenbp | Not affected | ||
| Red Hat Fuse 7 | threetenbp | Out of support scope | ||
| Red Hat Integration Camel K 1 | threetenbp | Not affected | ||
| Red Hat Integration Camel Quarkus 2 | threetenbp | Out of support scope | ||
| Red Hat JBoss Data Grid 7 | threetenbp | Out of support scope | ||
| Red Hat JBoss Enterprise Application Platform 7 | threetenbp | Out of support scope |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
7.5 High
CVSS3
Связанные уязвимости
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate).
7.5 High
CVSS3