Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-7VGJ-8MW4-HG8R
HistoryMay 13, 2022 - 1:09 a.m.

Improper Input Validation in Apache CXF

2022-05-1301:09:20
Google
osv.dev
11

0.002 Low

EPSS

Percentile

58.4%

JSON

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS services are vulnerable to this attack. From Apache CXF 3.2.1 and 3.1.14, message attachment headers that are greater than 300 characters will be rejected by default. This value is configurable via the property “attachment-max-header-size”.

References

Related

ibm 33
cve 1
veracode 2
nessus 3
github 1
nvd 1
redhatcve 1
osv 1
prion 1
cvelist 1
redhat 4
ibm
ibm
Security Bulletin: Denial of Service in Apache CXF used by WebSphere Application Server affect IBM Operations Analytics - Log Analysis (CVE-2017-12624)
2018-12-26 07:30:02
Security Bulletin: Open Source Apache CXF Vulnerablities affect IBM Tivoli Application Dependency Discovery Manager (TADDM) (CVE-2017-12624)
2018-06-17 15:49:25
Security Bulletin: A security vulnerability has been identified in Apache CXF, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2017-12624).
2023-06-28 22:03:05
cve
cve
CVE-2017-12624
2017-11-14 16:29:00
veracode
veracode
Denial Of Service (DoS)
2017-09-18 05:59:53
Denial Of Service (DoS)
2019-01-15 09:24:37
nessus
nessus
IBM WebSphere Application Server 9.0.x < 9.0.0.7 DoS (CVE-2017-12624)
2020-10-20 00:00:00
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL7 (RHSA-2018:2424)
2018-08-21 00:00:00
RHEL 6 : Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL 6 (RHSA-2018:2423)
2018-08-21 00:00:00
github
github
Improper Input Validation in Apache CXF
2022-05-13 01:09:20
nvd
nvd
CVE-2017-12624
2017-11-14 16:29:00
redhatcve
redhatcve
CVE-2017-12624
2019-10-08 11:12:52
osv
osv
CVE-2017-12624
2017-11-14 16:29:00
prion
prion
Design/Logic Flaw
2017-11-14 16:29:00
cvelist
cvelist
CVE-2017-12624
2017-11-14 00:00:00
redhat
redhat
(RHSA-2018:2425) Important: Red Hat JBoss Enterprise Application Platform 7.1 security update
2018-08-15 11:19:19
(RHSA-2018:2423) Important: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL 6 security update
2018-08-15 11:19:15
(RHSA-2018:2424) Important: Red Hat JBoss Enterprise Application Platform 7.1.4 on RHEL7 security update
2018-08-15 11:19:18

0.002 Low

EPSS

Percentile

58.4%

JSON
Related for OSV:GHSA-7VGJ-8MW4-HG8R
ibm33cve1veracode2nessus3github1nvd1redhatcve1osv1prion1cvelist1redhat4