27 matches found
[SECURITY] Fedora 40 Update: jackson-databind-2.16.1-4.fc40
The general-purpose data-binding functionality and tree-model for Jackson Data Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...
The vulnerability of the streaming transmission parser, related to incorrect resource cleaning or release, allows a hacker to cause a service failure.
The vulnerability of the streaming transmission parser is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Expat 输入验证错误漏洞
Expat is a fast streaming XML parser written in C. Expat is vulnerable to an integer overflow vulnerability that stems from an integer overflow in copyString. No detailed vulnerability details are currently available...
[SECURITY] Fedora 32 Update: jackson-databind-2.10.5.1-1.fc32
The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...
[SECURITY] Fedora 30 Update: jackson-databind-2.9.9.3-1.fc30
The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...
[SECURITY] Fedora 29 Update: jackson-databind-2.9.8-1.fc29
The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...
apache-cxf: Multiple denial of service flaws in the StAX parser
The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service CPU and memory consumption via crafted XML with a large number of 1 elements, 2 attributes, 3 nested constructs, and possibly other vectors...