Lucene search
Veracode Vulnerability DatabaseVERACODE:37284HistorySep 27, 2022 - 2:42 a.m.
Denial Of Service (DoS)
2022-09-2702:42:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
pulsar-proxy
denial of service
vulnerability
tcp/ip connection
EPSS
0.001
Percentile
23.9%
pulsar-proxy is vulnerable to denial of service. The vulnerability exists because the library does not properly limit the proxy broker connections in pulsar proxy functionality, allowing an attacker to crash the application by making TCP/IP connection attempts.
References
github.com/advisories/GHSA-3mg9-m3f6-v7fq
github.com/apache/pulsar/commit/3d2e6ce84b6e69667a1c2095b766d9941a258b61
github.com/apache/pulsar/commit/b3bac91a74ad0e9358c0d5c12f87b89166276c67
github.com/apache/pulsar/commit/be806ea68e69ced4408370581496ca1a583526f3
github.com/apache/pulsar/pull/14078
lists.apache.org/thread/ghs9jtjfbpy4c6xcftyvkl6swznlom1v
Related
cnvd
cnvd
Apache Pulsar Proxy Input Validation Error Vulnerability
2022-09-28 00:00:00
osv
osv
CVE-2022-24280
2022-09-23 10:15:10
prion
prion
Input validation
2022-09-23 10:15:00
nvd
nvd
CVE-2022-24280
2022-09-23 10:15:10
github
github
cvelist
cvelist
CVE-2022-24280 Apache Pulsar Proxy target broker address isn't validated
2022-09-23 09:25:12
cve
cve
CVE-2022-24280
2022-09-23 10:15:10