VDB
BDU%3A2023-05627
BDU%3A2023-05627
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат XStream платформы виртуализации VMware Cloud Foundation, связанная с переполнением буфера на стеке, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., АО "НППКТ", Xstream Project | OpenShift Container Platform, Jboss Fuse, JBoss Data Grid, Red Hat Single Sign-On, JBoss Enterprise Application Platform, Red Hat Process Automation, Red Hat build of Quarkus, Red Hat Integration Camel K, Red Hat Integration Service Registry, Red Hat Integration Camel Quarkus, Red Hat Data Grid, Decision Manager, OpenShift Developer Tools and Services, Red Hat Integration Camel for Spring Boot, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Keycloak, XStream, Jboss Fuse Service Works, Migration Toolkit for Runtimes, Migration Toolkit for Applications |
Timeline
- Sep 14, 2023 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://github.com/x-stream/xstream/security/advisories/GHSA-j563-grx4-pjpv url
- https://x-stream.github.io/CVE-2022-41966.html url
- https://vuldb.com/ru/?id.226393 url
- https://access.redhat.com/security/cve/cve-2022-41966 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.7/ url
- https://access.redhat.com/security/cve/CVE-2022-41966 advisory