Lucene search
K

6 matches found

OSV
OSV
added 2023/12/28 9:30 p.m.6 views

GHSA-488M-W9FP-5MM2 Infinispan circular object references causes out of memory errors

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

7.1CVSS6.3AI score0.001EPSS
Exploits0References12
Github Security Blog
Github Security Blog
added 2023/12/28 9:30 p.m.16 views

Infinispan circular object references causes out of memory errors

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

6.5CVSS6.3AI score0.001EPSS
Exploits0References12Affected Software1
NVD
NVD
added 2023/12/18 2:15 p.m.18 views

CVE-2023-5236

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

6.5CVSS0.001EPSS
Exploits0References4
Prion
Prion
added 2023/12/18 2:15 p.m.19 views

Design/Logic Flaw

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

4CVSS6.7AI score0.001EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/12/18 1:43 p.m.146 views

CVE-2023-5236

Summary (based on provided sources): CVE-2023-5236 affects Infinispan and is caused by failing to detect circular object references during unmarshalling, enabling a remote-authenticated attacker to insert a crafted object into the cache to trigger out-of-memory conditions and a denial of service....

6.5CVSS5.3AI score0.001EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2023/09/27 4:54 p.m.45 views

CVE-2023-5236

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service...

4.4CVSS6.5AI score0.001EPSS
Exploits0References3
Rows per page
Query Builder