CVE-2023-6481

A flaw was found in the logback package. Affected versions of this package are vulnerable to Uncontrolled Resource Consumption 'Resource Exhaustion' via the logback receiver component. This flaw allows an attacker to mount a denial-of-service attack by sending poisoned data. Mitigation Mitigation...

CVE-2023-6378

A flaw was found in the logback package, where it is vulnerable to a denial of service caused by a serialization flaw in the receiver component. By sending specially crafted poisoned data, a remote attacker can cause a denial of service condition. Mitigation Mitigation for this issue is either no...

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

be.yildiz-games:common-logging-logback (1.1.25), ch.qos.logback:logback-access (1.4.13) +131 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.4.13)

ch.qos.logback:logback-core MAVEN version 1.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - be.yildiz-games:common-logging-logback 1.1.25 - ch.qos.logback:logback-access 1.4.13 -...

be.yildiz-games:common-logging-logback (1.1.25), ch.qos.logback:logback-access (1.4.13) +131 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.4.13)

ch.qos.logback:logback-core MAVEN version 1.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - be.yildiz-games:common-logging-logback 1.1.25 - ch.qos.logback:logback-access 1.4.13 -...

ch.qos.logback:logback-access (1.3.13), ch.qos.logback:logback-classic (1.3.13) +28 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.3.13)

ch.qos.logback:logback-core MAVEN version 1.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 1.3.13 - ch.qos.logback:logback-classic 1.3.13 -...

ai.apiverse:apipulse (1.0.1), ai.timefold.solver:timefold-solver-distribution-internal (0.8.41) +7225 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.2.12)

ch.qos.logback:logback-core MAVEN version 1.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.apiverse:apipulse 1.0.1 - ai.timefold.solver:timefold-solver-distribution-internal 0.8.41 -...

ch.qos.logback:logback-access (1.3.13), ch.qos.logback:logback-classic (1.3.13) +28 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.3.13)

ch.qos.logback:logback-core MAVEN version 1.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 1.3.13 - ch.qos.logback:logback-classic 1.3.13 -...

ai.apiverse:apipulse (1.0.1), ai.timefold.solver:timefold-solver-distribution-internal (0.8.41) +7225 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.2.12)

ch.qos.logback:logback-core MAVEN version 1.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.apiverse:apipulse 1.0.1 - ai.timefold.solver:timefold-solver-distribution-internal 0.8.41 -...

GHSA-GM62-RW4G-VRC4 Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

Design/Logic Flaw

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

UBUNTU-CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

CVE-2023-6481

CVE-2023-6481 concerns the logback receiver component in logback, affected in versions 1.4.13, 1.3.13, and 1.2.12. It describes a serialization vulnerability that enables a Denial-of-Service attack when poisoned data is received. The connected documents corroborate a DoS impact and reference mult...

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

ai.apiverse:apipulse (1.0.1), ai.timefold.solver:timefold-solver-distribution-internal (0.8.41) +7225 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.2.12)

ch.qos.logback:logback-core MAVEN version 1.2.12 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ai.apiverse:apipulse 1.0.1 - ai.timefold.solver:timefold-solver-distribution-internal 0.8.41 -...

ch.qos.logback:logback-access (1.3.13), ch.qos.logback:logback-classic (1.3.13) +28 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.3.13)

ch.qos.logback:logback-core MAVEN version 1.3.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - ch.qos.logback:logback-access 1.3.13 - ch.qos.logback:logback-classic 1.3.13 -...

CVE-2023-6481 Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

be.yildiz-games:common-logging-logback (1.1.25), ch.qos.logback:logback-access (1.4.13) +131 more potentially affected by CVE-2023-6481 via ch.qos.logback:logback-core (1.4.13)

ch.qos.logback:logback-core MAVEN version 1.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on ch.qos.logback:logback-core and may be impacted: - be.yildiz-games:common-logging-logback 1.1.25 - ch.qos.logback:logback-access 1.4.13 -...