Non notée
CVE-2021-43045 A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a…
Description
A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Avro 1.10 | premières → 1.10.2 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
- [oss-security] 20220106 CVE-2021-43045: Apache Avro: Possible DOS vulnerabilities in C# Avro SDK www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Avro
Les 4 CVE de Apache Avro →
CVE-2022-36125
It is possible to crash (panic) an application by providing a corrupted data to be read
Non notée
CVE-2022-36124
It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the…
Non notée
CVE-2022-35724
It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU
Non notée