Lucene search
UbuntuUSN-6692-1HistoryMar 12, 2024 - 12:00 a.m.
Gson vulnerability
2024-03-1200:00:00
ubuntu.com
10
gson vulnerability
ubuntu
java serialization
Releases
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- libgoogle-gson-java - A Java serialization/deserialization library to convert Java Objects into JSON and back
Details
It was discovered that Gson incorrectly handled deserialization of untrusted
input data. If a user or an automated system were tricked into opening a
specially crafted input file, a remote attacker could possibly use this issue
to cause a denial of service.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 22.04 | noarch | libgoogle-gson-java | < 2.8.8-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 20.04 | noarch | libgoogle-gson-java | < 2.8.5-3+deb10u1build0.20.04.1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libgoogle-gson-java | < 2.8.5-3~18.04.1~esm1 | UNKNOWN |
| Ubuntu | 18.04 | noarch | libgoogle-gson-java | < 2.8.5-3~18.04 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libgoogle-gson-java | < 2.4-1ubuntu0.1~esm1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libgoogle-gson-java | < 2.4-1 | UNKNOWN |
| Ubuntu | 16.04 | noarch | libgoogle-gson-java-doc | < 2.4-1 | UNKNOWN |
References
Related
nessus
nessus
Debian DLA-3001-1 : libgoogle-gson-java - LTS security update
2022-05-17 00:00:00
Oracle Enterprise Manager Cloud Control (Jan 2023 CPU)
2023-01-18 00:00:00
Debian DLA-3100-1 : libgoogle-gson-java - LTS security update
2022-09-07 00:00:00
osv
osv
libgoogle-gson-java - security update
2022-09-07 00:00:00
CVE-2022-25647
2022-05-01 16:15:08
Deserialization of Untrusted Data in Gson
2022-05-03 00:00:44
ibm
ibm
broadcom
broadcom
wolfi
wolfi
CVE-2022-25647 vulnerabilities
2024-05-27 09:07:32
openvas
openvas
Debian: Security Advisory (DLA-3100-1)
2022-09-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2044-1)
2022-06-13 00:00:00
Ubuntu: Security Advisory (USN-6692-1)
2024-03-13 00:00:00
cvelist
cvelist
CVE-2022-25647 Deserialization of Untrusted Data
2022-05-01 00:00:00
ubuntucve
ubuntucve
CVE-2022-25647
2022-05-01 00:00:00
debiancve
debiancve
CVE-2022-25647
2022-05-01 16:15:00
atlassian
atlassian
redhatcve
redhatcve
CVE-2022-25647
2022-05-02 07:38:06
alpinelinux
alpinelinux
CVE-2022-25647
2022-05-01 16:15:00
f5
f5
K00994461 : GSON vulnerability CVE-2022-25647
2022-08-29 00:00:00
cgr
cgr
CVE-2022-25647 vulnerabilities
2024-05-19 03:07:16
debian
debian
[SECURITY] [DSA 5227-1] libgoogle-gson-java security update
2022-09-07 10:39:31
[SECURITY] [DLA 3100-1] libgoogle-gson-java security update
2022-09-07 09:14:46
[SECURITY] [DLA 3001-1] libgoogle-gson-java security update
2022-05-13 21:46:21
cve
cve
CVE-2022-25647
2022-05-01 16:15:00
prion
prion
Deserialization of untrusted data
2022-05-01 16:15:00
veracode
veracode
Denial Of Service (DoS)
2022-05-04 14:43:44
github
github
Deserialization of Untrusted Data in Gson
2022-05-03 00:00:44
suse
suse
Security update for google-gson (important)
2022-06-10 00:00:00
mageia
mageia
Updated google-gson packages fix security vulnerability
2022-09-21 21:15:27
redhat
redhat
hivepro
hivepro
Critical Security Vulnerabilities Discovered in Atlassian Products
2023-09-27 10:22:43
thn
thn
High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server
2023-09-22 08:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00