Lucene search
+L

290 matches found

CNVD
CNVD
added 2018/04/27 12:0 a.m.2 views

Google Guava Unlimited Memory Allocation Vulnerability

Google Guava is a U.S. Google Google company developed a core Java library , including graphics libraries , function types , I / O and string processing and so on. A security vulnerability exists in Google Guava versions 11.0 to 24.1.1 excluding version 24.1.1, which originates from the program...

5.9CVSS6.7AI score0.05119EPSS
SaveExploits0References1
Prion
Prion
added 2018/04/26 9:29 p.m.41 views

Design/Logic Flaw

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

4.3CVSS6.2AI score0.05119EPSS
SaveExploits0References53Affected Software17
OSV
OSV
added 2018/04/26 9:29 p.m.6 views

UBUNTU-CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9CVSS6.9AI score0.05119EPSS
SaveExploits0References2
OSV
OSV
added 2018/04/26 9:29 p.m.36 views

CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9CVSS5.9AI score
SaveExploits0References53
UbuntuCve
UbuntuCve
added 2018/04/26 9:29 p.m.27 views

CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9CVSS6.9AI score0.05119EPSS
SaveExploits0References1
NVD
NVD
added 2018/04/26 9:29 p.m.27 views

CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9CVSS5.8AI score0.05119EPSS
SaveExploits0References53
OSV
OSV
added 2018/04/26 9:29 p.m.10 views

DEBIAN-CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9CVSS8.1AI score0.05119EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2018/04/26 9:0 p.m.33 views

CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9CVSS7.2AI score0.05119EPSS
SaveExploits0
CVE
CVE
added 2018/04/26 9:0 p.m.676 views

CVE-2018-10237

CVE-2018-10237 affects Google Guava 11.0–24.x before 24.1.1. Unbounded memory allocation occurs during Java serialization of AtomicDoubleArray and GWT serialization of CompoundOrdering, enabling potential denial-of-service via memory exhaustion. Root cause is eager allocation without checks on cl...

5.9CVSS5.9AI score0.05119EPSS
SaveExploits0References53Affected Software1
Cvelist
Cvelist
added 2018/04/26 9:0 p.m.35 views

CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class when serialized with Java serialization...

5.9AI score0.05119EPSS
SaveExploits0References53
Rows per page
Query Builder