netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-3f7h-mf4q-vrm4

Browse Source
This commit is contained in:
advisory-database[bot]
2025-05-23 19:07:18 +00:00
parent 5e811d4e15
commit 3372d61fa2
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/09/GHSA-3f7h-mf4q-vrm4/GHSA-3f7h-mf4q-vrm4.json
+6 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3f7h-mf4q-vrm4",
"modified": "2023-07-05T22:37:39Z",
"modified": "2025-05-23T19:05:46Z",
"published": "2022-09-17T00:00:41Z",
"aliases": [
"CVE-2022-40152"
],
"summary": "Denial of Service due to parser crash",
"details": "Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\nThis vulnerability is only relevant for users making use of the DTD parsing functionality. ",
"details": "Those using FasterXML/woodstox to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.\n\nThis vulnerability is only relevant for users making use of the DTD parsing functionality.",
"severity": [
{
"type": "CVSS_V3",
@@ -85,7 +85,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-121",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2022-09-20T21:21:07Z",