Lucene search
China National Vulnerability DatabaseCNVD-2022-61912HistoryAug 11, 2022 - 12:00 a.m.
Apache Avro Denial of Service Vulnerability
2022-08-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
apache
avro
denial of service
vulnerability
rust sdk
integer overflow
corrupted files
attack
crash
program
0.001 Low
EPSS
Percentile
35.5%
Apache Avro is a data serialization system from the Apache Foundation, Inc. A denial of service vulnerability exists in versions of Apache Avro Rust prior to 0.14.0, which stems from an integer overflow when reading corrupted .avro files in the Avro Rust SDK, and can be exploited by an attacker to crash a program.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache apache avro | lt | 0.14.0 |
Related
github
github
Apache Avro Rust SDK corrupted data read can cause crash
2022-08-10 00:00:31
cve
cve
CVE-2022-36125
2022-08-09 07:15:07
nvd
nvd
CVE-2022-36125
2022-08-09 07:15:07
osv
osv
Apache Avro Rust SDK corrupted data read can cause crash
2022-08-10 00:00:31
prion
prion
Design/Logic Flaw
2022-08-09 07:15:00
cvelist
cvelist