Lucene search
PRIOn knowledge basePRION:CVE-2023-39410HistorySep 29, 2023 - 5:15 p.m.
Design/Logic Flaw
2023-09-2917:15:00
PRIOn knowledge base
www.prio-n.com
10
data deserialization
memory consumption
java applications
apache avro java sdk
vulnerability
update
nvd
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
Related
cgr
cgr
CVE-2023-39410 vulnerabilities
2024-05-19 03:07:16
ibm
ibm
atlassian
atlassian
osv
osv
Apache Avro Java SDK vulnerable to Improper Input Validation
2023-09-29 18:30:22
PYSEC-2023-188
2023-09-29 17:15:00
github
github
Apache Avro Java SDK vulnerable to Improper Input Validation
2023-09-29 18:30:22
redhatcve
redhatcve
CVE-2023-39410
2023-10-09 19:55:01
nvd
nvd
CVE-2023-39410
2023-09-29 17:15:46
cve
cve
CVE-2023-39410
2023-09-29 17:15:46
broadcom
broadcom
nessus
nessus
wolfi
wolfi
CVE-2023-39410 vulnerabilities
2024-07-05 21:08:40
veracode
veracode
Denial Of Service (DoS)
2023-10-05 06:04:41
vulnrichment
vulnrichment
alpinelinux
alpinelinux
CVE-2023-39410
2023-09-29 17:15:46
gitlab
gitlab
Deserialization of Untrusted Data
2023-09-29 00:00:00
cvelist
cvelist
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00