CVE-2022-26477

🗓️ 27 Jun 2022 17:15:18Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 93 Views

CVE-2022-26477: Added termination condition in readExternal method to prevent CPU exhaustion. Improved robustness with minimal overhead

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2022-26477	27 Jun 202218:15	–	attackerkb
Circl	CVE-2022-26477	27 Jun 202222:34	–	circl
CNNVD	Apache SystemDS 资源管理错误漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Apache SystemDS Denial of Service Vulnerability	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-26477 Denial of service in readExternal method	27 Jun 202217:15	–	cvelist
EUVD	EUVD-2022-0283	3 Oct 202520:07	–	euvd
Github Security Blog	SystemDS CPU exhaustion vulnerability	28 Jun 202200:00	–	github
NVD	CVE-2022-26477	27 Jun 202218:15	–	nvd
OSV	GHSA-M43H-HFRQ-X8WX SystemDS CPU exhaustion vulnerability	28 Jun 202200:00	–	osv
OSV	PYSEC-2022-222	27 Jun 202218:15	–	osv

NVD

Vulners

Node

apache systemdsRange≤2.2.1

[
  {
    "product": "Apache SystemDS",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.2.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]