Lucene search
GitHub Advisory DatabaseGHSA-W33C-445M-F8W7HistoryJul 12, 2023 - 9:30 p.m.
Okio Signed to Unsigned Conversion Error vulnerability
2023-07-1221:30:50
CWE-195
CWE-681
GitHub Advisory Database
github.com
21
okio
signed to unsigned
conversion error
gzipsource
exception
denial of service
crafted
gzip archive
0.0004 Low
EPSS
Percentile
12.3%
GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.
References
github.com/advisories/GHSA-w33c-445m-f8w7
github.com/square/okio/blob/master/CHANGELOG.md#version-1176
github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b
github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839
github.com/square/okio/pull/1280
github.com/square/okio/pull/1334
nvd.nist.gov/vuln/detail/CVE-2023-3635
research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195/
Related
cgr
cgr
CVE-2023-3635 vulnerabilities
2024-05-19 03:07:16
prion
prion
Design/Logic Flaw
2023-07-12 19:15:00
nessus
nessus
ibm
ibm
atlassian
atlassian
redhatcve
redhatcve
CVE-2023-3635
2023-08-11 19:48:49
cve
cve
CVE-2023-3635
2023-07-12 19:15:08
osv
osv
CVE-2023-3635
2023-07-12 19:15:08
Okio Signed to Unsigned Conversion Error vulnerability
2023-07-12 21:30:50
debiancve
debiancve
CVE-2023-3635
2023-07-12 19:15:08
ubuntucve
ubuntucve
CVE-2023-3635
2023-07-12 00:00:00
cvelist
cvelist
CVE-2023-3635 Okio GzipSource unhandled exception Denial of Service
2023-07-12 18:34:31
veracode
veracode
Denial Of Service (DoS)
2023-07-14 02:23:17
wolfi
wolfi
CVE-2023-3635 vulnerabilities
2024-06-01 21:07:39
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00