Lucene search
Veracode Vulnerability DatabaseVERACODE:22104HistoryDec 05, 2019 - 6:34 a.m.
Denial Of Service (DoS)
2019-12-0506:34:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
38.0%
odata-client-core is vulnerable to denial of service (DoS). The attack is possible because AsyncResponseWrapperImpl class fails to validate the retryAfter value before directly parsing it to the Thread.sleep() method, allowing a malicious server to trigger an application crash via a huge value in the header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| odata-client-core | le | 4.6.0 |
Related
nvd
nvd
CVE-2019-17555
2019-12-04 18:15:16
cvelist
cvelist
CVE-2019-17555
2019-12-04 17:06:18
github
github
Improper input validation in Apache Olingo
2020-02-04 22:37:15
osv
osv
Improper input validation in Apache Olingo
2020-02-04 22:37:15
CVE-2019-17555
2019-12-04 18:15:16
prion
prion
Design/Logic Flaw
2019-12-04 18:15:00
cve
cve
CVE-2019-17555
2019-12-04 18:15:16