154 matches found
Denial Of Service (DoS)
akka is vulnerable to denial of service DoS attacks. A malicious user can pass an HTTP request containing an Accept header with an invalid media range such as \xml to the application, causing a StackOverflow error that crashes the application...
CVE-2017-1000118
Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...
CVE-2017-1000118
Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...
Design/Logic Flaw
Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...
CVE-2017-1000118
Akka HTTP versions = 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service...
CVE-2017-1000118
CVE-2017-1000118 affects Akka HTTP versions
CVE-2017-1000034
Akka versions =2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem...
Akka Remoting Component Remote Code Execution Vulnerability
Akka is an open source toolkit for building highly concurrent and distributed message-driven applications.Remoting component is one of the remote interaction component. A security vulnerability exists in the Remoting component in Akka versions 2.4.16 and earlier and 2.5-M1. A remote attacker can...
Insecure Defaults
akka-actor has insecure defaults. An attacker can leverage an ActorSystem exposed over TCP to perform Java deserialization attacks. By default Java deserialization is enabled and the documentation wasn't complete on how to disable the function.These attacks can be performed if the ActorSystem has...
CVE-2017-1000034
Akka versions =2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem...
CVE-2017-1000034
Akka versions =2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem...
Deserialization of untrusted data
Akka versions =2.4.16 and 2.5-M1 are vulnerable to a java deserialization attack in its Remoting component resulting in remote code execution in the context of the ActorSystem...