Lucene search
Broadcom Security ResponseBSNSA23262HistoryApr 16, 2024 - 12:00 a.m.
Apache Avro Java SDK vulnerable to Improper Input Validation (CVE-2023-39410)
2024-04-1600:00:00
Broadcom Security Response
support.broadcom.com
11
apache avro
java sdk
improper input validation
cve-2023-39410
deserialization
memory consumption
out of memory
update
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
Affected configurations
Node
broadcombrocade_sannavRange<2.3.0a
| CPE | Name | Operator | Version |
|---|---|---|---|
| brocade sannav | lt | 2.3.0a |
Related
cgr
cgr
CVE-2023-39410 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
nvd
nvd
CVE-2023-39410
2023-09-29 17:15:46
redhatcve
redhatcve
CVE-2023-39410
2023-10-09 19:55:01
osv
osv
PYSEC-2023-188
2023-09-29 17:15:00
Apache Avro Java SDK vulnerable to Improper Input Validation
2023-09-29 18:30:22
cve
cve
CVE-2023-39410
2023-09-29 17:15:46
prion
prion
Design/Logic Flaw
2023-09-29 17:15:00
atlassian
atlassian
github
github
Apache Avro Java SDK vulnerable to Improper Input Validation
2023-09-29 18:30:22
nessus
nessus
wolfi
wolfi
CVE-2023-39410 vulnerabilities
2024-07-05 21:08:40
veracode
veracode
Denial Of Service (DoS)
2023-10-05 06:04:41
vulnrichment
vulnrichment
alpinelinux
alpinelinux
CVE-2023-39410
2023-09-29 17:15:46
gitlab
gitlab
Deserialization of Untrusted Data
2023-09-29 00:00:00
cvelist
cvelist
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00