CVE-2022-35724
Denial of service while reading data in Avro Rust SDK
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
09 ago 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.
Productos afectados
Apache Software Foundation · Apache Avro¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →