Lucene search
+L

5277 matches found

RedhatCVE
RedhatCVE
•added 2023/12/05 12:43 p.m.•119 views

CVE-2023-6378

A flaw was found in the logback package, where it is vulnerable to a denial of service caused by a serialization flaw in the receiver component. By sending specially crafted poisoned data, a remote attacker can cause a denial of service condition. Mitigation Mitigation for this issue is either no...

7.5CVSS6.8AI score0.009EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/12/04 9:30 a.m.•77 views

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00682EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/12/04 9:30 a.m.•31 views

GHSA-GM62-RW4G-VRC4 Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.2AI score0.00682EPSS
SaveExploits0References6
NVD
NVD
•added 2023/12/04 9:15 a.m.•24 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS0.00682EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/12/04 9:15 a.m.•63 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.9AI score0.00682EPSS
SaveExploits0References4
Prion
Prion
•added 2023/12/04 9:15 a.m.•29 views

Design/Logic Flaw

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

5CVSS6.8AI score0.00682EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2023/12/04 8:35 a.m.•3 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

8.2CVSS0.00682EPSS
SaveExploits0References7
OSV
OSV
•added 2023/12/04 8:35 a.m.•15 views

CVE-2023-6481 Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.1AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2023/12/04 8:35 a.m.•51 views

CVE-2023-6481 Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.6AI score0.009EPSS
SaveExploits0References2
CVE
CVE
•added 2023/12/04 8:35 a.m.•517 views

CVE-2023-6481

CVE-2023-6481 concerns the logback receiver component in logback, affected in versions 1.4.13, 1.3.13, and 1.2.12. It describes a serialization vulnerability that enables a Denial-of-Service attack when poisoned data is received. The connected documents corroborate a DoS impact and reference mult...

7.5CVSS7AI score0.00682EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2023/12/04 8:35 a.m.•91 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00682EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•4 views

CVE-2023-6481: Undefined Security Weakness

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS7.2AI score0.00682EPSS
SaveExploits0References1
GitLab Advisory Database
GitLab Advisory Database
•added 2023/12/04 12:00 a.m.•42 views

Logback is vulnerable to an attacker mounting a Denial-Of-Service attack by sending poisoned data

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00682EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/11/29 12:30 p.m.•29 views

GHSA-VMQ6-5M68-F53M logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.1CVSS6.9AI score0.009EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
•added 2023/11/29 12:30 p.m.•227 views

logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.5CVSS7AI score0.009EPSS
SaveExploits0References10Affected Software2
NVD
NVD
•added 2023/11/29 12:15 p.m.•37 views

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS0.009EPSS
SaveExploits0References2
OSV
OSV
•added 2023/11/29 12:15 p.m.•7 views

DEBIAN-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.6AI score0.009EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2023/11/29 12:15 p.m.•52 views

CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.9AI score0.009EPSS
SaveExploits0References3
Prion
Prion
•added 2023/11/29 12:15 p.m.•37 views

Design/Logic Flaw

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

5CVSS6.7AI score0.009EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/11/29 12:15 p.m.•14 views

UBUNTU-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.8AI score0.009EPSS
SaveExploits0References4
Rows per page
Query Builder