Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-40153HistorySep 16, 2022 - 10:15 a.m.
CVE-2022-40153
2022-09-1610:15:00
Debian Security Bug Tracker
security-tracker.debian.org
20
xstream
xml data
denial of service
stack overflow
user-supplied input
parser
crash
unix
Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libxstream-java | <= 1.4.19-1 | libxstream-java_1.4.19-1_all.deb |
| Debian | 11 | all | libxstream-java | <= 1.4.15-3+deb11u1 | libxstream-java_1.4.15-3+deb11u1_all.deb |
| Debian | 10 | all | libxstream-java | <= 1.4.11.1-1+deb10u3 | libxstream-java_1.4.11.1-1+deb10u3_all.deb |
| Debian | 999 | all | libxstream-java | <= 1.4.19-1 | libxstream-java_1.4.19-1_all.deb |
Related
github
github
Denial of Service due to parser crash
2022-09-17 00:00:41
osv
osv
Denial of Service due to parser crash
2022-09-17 00:00:41
cve
cve
CVE-2022-40153
2022-09-16 10:15:09
redhatcve
redhatcve
CVE-2022-40153
2022-10-13 15:30:54
ubuntucve
ubuntucve
CVE-2022-40153
2022-09-16 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-09-19 16:37:33
ibm
ibm
Security Bulletin: Due to the use of XStream, IBM Tivoli Netcool Configuration Manager is vulnerable to Denial of Service (DoS) attacks (CVE-2022-40153)
2023-01-30 11:56:51
nvd
nvd
CVE-2022-40153
2022-09-16 10:15:09
cvelist
cvelist
CVE-2022-40153
1976-01-01 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Related for DEBIANCVE:CVE-2022-40153