Not rated
CVE-2021-43045 A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a…
Description
A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Avro 1.10 | earliest → 1.10.2 | No fix stated |
Other CVEs of Apache Avro
The 4 CVEs of Apache Avro →
CVE-2022-36125
It is possible to crash (panic) an application by providing a corrupted data to be read
Not rated
CVE-2022-36124
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the…
Not rated
CVE-2022-35724
It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU
Not rated