Excessive Platform Resource Consumption within a Loop

Overview Affected versions of this package are vulnerable to Excessive Platform Resource Consumption within a Loop through repeated compilation of a loop-invariant regular expression inside the DecodeObject process. An attacker can exhaust CPU resources and degrade or deny service to legitimate...

Jenkins-LDAP (CVE-2016-9299) deserialization vulnerability analysis-vulnerability warning-the black bar safety net

Source: gone with the wind's Blog Author: iswin This vulnerability in the last 11 month of official release announcement when I was concerned too, when he was looking for com. sun. jndi. ldap. LdapAttribute this class related to the deserialization was aware of this category inside the...