Поиск уязвимостей
Количество 5
Количество 5
CVE-2023-39410
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
CVE-2023-39410
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
GHSA-rhrv-645h-fjfh
Apache Avro Java SDK vulnerable to Improper Input Validation
BDU:2024-02310
Уязвимость библиотеки сериализации данных Apache Avro, связанная с недостатками механизма десериализации, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2023-8973
ALT-PU-2023-8973: package `python3-module-avro` update to version 1.11.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-39410 When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue. | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
 | CVE-2023-39410 When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue. | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
| GHSA-rhrv-645h-fjfh Apache Avro Java SDK vulnerable to Improper Input Validation | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
 | BDU:2024-02310 Уязвимость библиотеки сериализации данных Apache Avro, связанная с недостатками механизма десериализации, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
| ALT-PU-2023-8973 ALT-PU-2023-8973: package `python3-module-avro` update to version 1.11.3-alt1 | CVSS3: 7.5 | 2% Низкий | около 3 лет назад |
Уязвимостей на страницу