Lucene search
Veracode Vulnerability DatabaseVERACODE:37118HistorySep 19, 2022 - 5:03 a.m.
Denial Of Service (DoS)
2022-09-1905:03:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
denial of service
xstream
annotationmapper.java
stack overflow
application crash
malicious input
parser software
0.008 Low
EPSS
Percentile
82.2%
xstream is vulnerable to Denial Of Service (DoS). The vulnerability exists due to the stack overflow in the processConverterAnnotations function of AnnotationMapper.java, allowing an attacker to cause an application crash by providing malicious input through the parser
References
Related
cvelist
cvelist
CVE-2022-40151 Stack Buffer Overflow in xstream
2022-08-07 00:00:00
cve
cve
CVE-2022-40151
2022-09-16 10:15:09
nessus
nessus
Amazon Linux 2 : xstream (ALAS-2024-2464)
2024-02-19 00:00:00
debiancve
debiancve
CVE-2022-40151
2022-09-16 10:15:09
nvd
nvd
CVE-2022-40151
2022-09-16 10:15:09
osv
osv
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
2022-12-30 16:58:39
CVE-2022-40151
2022-09-16 10:15:09
redhatcve
redhatcve
CVE-2022-40151
2022-10-13 15:30:53
amazon
amazon
Medium: xstream
2024-02-15 03:52:00
ibm
ibm
ubuntucve
ubuntucve
CVE-2022-40151
2022-09-16 00:00:00
prion
prion
Input validation
2022-09-16 10:15:00
github
github
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:1673-1)
2023-03-30 00:00:00
freebsd
freebsd
security/keycloak -- Multiple possible DoS attacks
2022-09-07 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00