Lucene search
K

4172 matches found

OSV
OSV
added 2023/12/04 9:15 a.m.5 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS7.3AI score
Exploits0References2
UbuntuCve
UbuntuCve
added 2023/12/04 9:15 a.m.53 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.9AI score0.00224EPSS
Exploits0References4
Prion
Prion
added 2023/12/04 9:15 a.m.21 views

Design/Logic Flaw

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

5CVSS6.8AI score0.00224EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/12/04 8:35 a.m.423 views

CVE-2023-6481

CVE-2023-6481 concerns the logback receiver component in logback, affected in versions 1.4.13, 1.3.13, and 1.2.12. It describes a serialization vulnerability that enables a Denial-of-Service attack when poisoned data is received. The connected documents corroborate a DoS impact and reference mult...

7.5CVSS7AI score0.00224EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2023/12/04 8:35 a.m.75 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00224EPSS
Exploits0
Cvelist
Cvelist
added 2023/12/04 8:35 a.m.26 views

CVE-2023-6481 Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.6AI score0.00224EPSS
Exploits0References2
GitLab Advisory Database
GitLab Advisory Database
added 2023/12/04 12:0 a.m.26 views

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00224EPSS
Exploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2023/11/29 12:30 p.m.207 views

logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.5CVSS7AI score0.0063EPSS
Exploits0References10Affected Software2
OSV
OSV
added 2023/11/29 12:30 p.m.1 views

GHSA-VMQ6-5M68-F53M logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.1CVSS6.9AI score0.0063EPSS
Exploits0References10
OSV
OSV
added 2023/11/29 12:15 p.m.7 views

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS7.2AI score
Exploits0References2
NVD
NVD
added 2023/11/29 12:15 p.m.19 views

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS0.0063EPSS
Exploits0References2
OSV
OSV
added 2023/11/29 12:15 p.m.1 views

DEBIAN-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.6AI score0.0063EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/11/29 12:15 p.m.42 views

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.9AI score0.0063EPSS
Exploits0References3
Prion
Prion
added 2023/11/29 12:15 p.m.28 views

Design/Logic Flaw

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

5CVSS6.7AI score0.0063EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2023/11/29 12:15 p.m.0 views

UBUNTU-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.8AI score0.0063EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/11/29 12:2 p.m.27 views

CVE-2023-6378 Logback "receiver" DOS vulnerability

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.6AI score0.0063EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/11/29 12:2 p.m.42 views

CVE-2023-6378 Logback "receiver" DOS vulnerability

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS6.5AI score0.0063EPSS
Exploits0References1
CVE
CVE
added 2023/11/29 12:2 p.m.520 views

CVE-2023-6378

CVE-2023-6378 involves a serialization vulnerability in the logback receiver component of logback version 1.4.11 that allows an attacker to mount a Denial-of-Service by sending poisoned data. The published entries consistently describe a DoS impact without other confidentiality or integrity effec...

7.5CVSS7.2AI score0.0063EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2023/11/29 12:2 p.m.98 views

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.8AI score0.0063EPSS
Exploits0
GitLab Advisory Database
GitLab Advisory Database
added 2023/11/29 12:0 a.m.44 views

logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.5CVSS7AI score0.0063EPSS
Exploits0References11Affected Software1
Rows per page
Query Builder