Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-39410HistorySep 29, 2023 - 5:15 p.m.
CVE-2023-39410
2023-09-2917:15:46
Alpine Linux Development Team
security.alpinelinux.org
6
deserialization
out of memory
apache avro
0.008 Low
EPSS
Percentile
81.9%
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | avro | = 1.11.1-r5 | UNKNOWN |
Related
cgr
cgr
CVE-2023-39410 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
atlassian
atlassian
osv
osv
Apache Avro Java SDK vulnerable to Improper Input Validation
2023-09-29 18:30:22
PYSEC-2023-188
2023-09-29 17:15:00
github
github
Apache Avro Java SDK vulnerable to Improper Input Validation
2023-09-29 18:30:22
nessus
nessus
wolfi
wolfi
CVE-2023-39410 vulnerabilities
2024-07-05 15:46:04
redhatcve
redhatcve
CVE-2023-39410
2023-10-09 19:55:01
nvd
nvd
CVE-2023-39410
2023-09-29 17:15:46
cve
cve
CVE-2023-39410
2023-09-29 17:15:46
broadcom
broadcom
prion
prion
Design/Logic Flaw
2023-09-29 17:15:00
gitlab
gitlab
Deserialization of Untrusted Data
2023-09-29 00:00:00
vulnrichment
vulnrichment
veracode
veracode
Denial Of Service (DoS)
2023-10-05 06:04:41
cvelist
cvelist
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00