Lucene search
Veracode Vulnerability DatabaseVERACODE:38676HistoryDec 28, 2022 - 7:50 a.m.
Denial Of Service(DoS)
2022-12-2807:50:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
denial of service
xstream.java
stack overflow
input stream manipulation
0.01 Low
EPSS
Percentile
83.8%
xstream core is vulnerable to Denial Of Service(DoS). The vulnerability exists in the unmarshal function in XStream.java due to a stack overflow which allows an attacker to manipulate the processed input stream at unmarshalling time and replace or inject objects calculating a recursive hash set.
Related
nessus
nessus
Debian DLA-3267-1 : libxstream-java - LTS security update
2023-01-16 00:00:00
Oracle Enterprise Manager Ops Center (Apr 2023 CPU)
2023-04-21 00:00:00
Debian DSA-5315-1 : libxstream-java - security update
2023-01-12 00:00:00
amazon
amazon
Important: xstream
2023-03-30 18:56:00
github
github
XStream can cause Denial of Service via stack overflow
2022-12-29 01:48:08
openvas
openvas
Debian: Security Advisory (DSA-5315-1)
2023-01-12 00:00:00
Debian: Security Advisory (DLA-3267-1)
2023-01-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:1673-1)
2023-03-30 00:00:00
nvd
nvd
CVE-2022-41966
2022-12-28 00:15:14
osv
osv
XStream can cause Denial of Service via stack overflow
2022-12-29 01:48:08
libxstream-java - security update
2023-01-11 00:00:00
CVE-2022-41966
2022-12-28 00:15:14
ibm
ibm
ubuntucve
ubuntucve
CVE-2022-41966
2022-12-28 00:00:00
debiancve
debiancve
CVE-2022-41966
2022-12-28 00:15:14
debian
debian
[SECURITY] [DSA 5315-1] libxstream-java security update
2023-01-11 22:35:02
[SECURITY] [DLA 3267-1] libxstream-java security update
2023-01-11 22:54:49
cvelist
cvelist
CVE-2022-41966 XStream Denial of Service via stack overflow
2022-12-27 23:07:54
cve
cve
CVE-2022-41966
2022-12-28 00:15:14
prion
prion
Stack overflow
2022-12-28 00:15:00
redhatcve
redhatcve
CVE-2022-41966
2023-02-16 11:56:06
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Xstream Project Xstream
2023-01-06 02:37:07
redhat
redhat
freebsd
freebsd
security/keycloak -- Multiple possible DoS attacks
2022-09-07 00:00:00
ubuntu
ubuntu
XStream vulnerabilities
2023-03-13 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00