Lucene search
CVE-2023-37475
Hamba avro go lang encoder/decoder, `github.com/hamba/avro/v2.Unmarshal()` allows DoS via crafted string (CVE-2023-37475
Show more
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | Unrestricted memory consumption in github.com/hamba/avro | 25 Jul 202322:53 | – | osv |
| CGA-M8C4-V4HM-5FGG | 8 Sep 202415:19 | – | osv |
| CVE-2023-37475 | 17 Jul 202317:15 | – | osv |
| avro vulnerable to denial of service via attacker-controlled parameter | 17 Jul 202310:55 | – | osv |
| CGA-J775-35XG-QF2F | 9 Sep 202410:05 | – | osv |
 | CVE-2023-37475 Attacker-controlled parameter can cause denial of service in hamba avro | 17 Jul 202316:36 | – | vulnrichment |
 | CVE-2023-37475 vulnerabilities | 17 Jul 202317:15 | – | cgr |
 | CVE-2023-37475 Attacker-controlled parameter can cause denial of service in hamba avro | 17 Jul 202316:36 | – | cvelist |
 | Code injection | 17 Jul 202317:15 | – | prion |
 | CVE-2023-37475 | 17 Jul 202317:15 | – | nvd |
10
Node
[
{
"vendor": "hamba",
"product": "avro",
"versions": [
{
"version": "< 2.13.0",
"status": "affected"
}
]
}
]Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo17 Jul 2023 17:15Current
7.3High risk
Vulners AI Score7.3
CVSS37.5
EPSS0.00097
SSVC