177 matches found
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Summary ValueReader.readTable and readArray recursively call readFieldValue with no depth limit. A malicious AMQP peer can crash the client JVM by sending a deeply nested table structure. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines 139-155 and 237-249: java priva...
GHSA-93J5-89VC-PPH4 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Summary ValueReader.readTable and readArray recursively call readFieldValue with no depth limit. A malicious AMQP peer can crash the client JVM by sending a deeply nested table structure. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines 139-155 and 237-249: java priva...
CVE-2026-69220 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
CVE-2026-69220 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
EUVD-2026-61042
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
CVE-2026-69220
In RabbitMQ Java client
CVE-2026-69220
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
PT-2026-77214
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input
A flaw was found in Apache Commons Configuration. When processing an untrusted configuration file, a remote attacker could provide specially crafted YAML input with cycles. This could lead to an uncontrolled recursion, causing a StackOverflowError and resulting in a Denial of Service DoS for the...
CVE-2026-66274
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability related to unbounded type nesting. This could lead to a StackOverflowError, causing the affected system to become unresponsive and resulting in a denial of service. Mitigati...
Uncontrolled Recursion
Overview org.bouncycastle:bcprov-jdk12 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Uncontrolled Recursion in the force method of LazyEncodedSequence, which parses the deferred SEQUENCE with a fresh ASN1InputStream whose nesting-depth...
jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()
Impact Potential Denial-of-Service when attacker sends deeply nested JSON if and only if service: 1. Reads deeply nested 1000s of levels JSON as JsonNode ObjectMapper.readTree 2. Writes out same or modifided node using JsonNode.toString which can consume significant amount of resources with...
Security Bulletin: StackOverflowError Denial-of-Service Vulnerability in Apache Commons Lang ClassUtils.getClass() Due to Uncontrolled Recursion affects watsonx.data
Summary Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass... can throw StackOverflowError on very lo...
commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang
An uncontrolled recursion flaw was found in the Apache Commons Lang library. The ClassUtils.getClass... method can throw a StackOverflowError on very long inputs. Since this error is typically not handled by applications and libraries, a StackOverflowError may lead to the termination of an...
EUVD-2019-0639
Malware in sbrugna...
EUVD-2010-4772
Malware in sbrugna...
Unity Linux 20.1070e Security Update: apache-commons-lang (UTSA-2025-986100)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986100 advisory. Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting withcommons-lang:commons-lang2.0 to 2.6, and, from...
EUVD-2022-7622
Malicious code in bioql PyPI...