Code injection

2021-11-3019:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

35.0%

JSON

In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString() method, will create a new String object from the message body, regardless of its size. This can cause an OOM Error with a large message

CPENameOperatorVersion
spring_advanced_message_queuing_protocolge2.2.0
spring_advanced_message_queuing_protocollt2.2.19
spring_advanced_message_queuing_protocolge2.3.0
spring_advanced_message_queuing_protocollt2.3.11

Name	Operator	Version
spring_advanced_message_queuing_protocol	ge	2.2.0
spring_advanced_message_queuing_protocol	lt	2.2.19
spring_advanced_message_queuing_protocol	ge	2.3.0
spring_advanced_message_queuing_protocol	lt	2.3.11

References

tanzu.vmware.com/security/cve-2021-22097

0.001 Low

EPSS

Percentile

35.0%

JSON

Related for PRION:CVE-2021-22095