VDB
BDU%3A2023-08465
BDU%3A2023-08465
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Уязвимость библиотеки woodstox, связанная с переполнением буфера в стеке, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
6.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Novell Inc., Canonical Ltd., Xstream Project, SonarSource, FasterXML, LLC | Red Hat Enterprise Linux, Red Hat JBoss Fuse, Debian GNU/Linux, openSUSE Tumbleweed, Red Hat OpenStack Platform, Red Hat JBoss Data Virtualization, Red Hat JBoss Data Grid, Red Hat build of Quarkus, Red Hat Integration Camel K, Red Hat Data Grid, Red Hat JBoss Fuse Service Works, SUSE Manager Server, Red Hat OpenShift Container Platform, Red Hat Satellite, Decision Manager, Ubuntu, Migration Toolkit for Runtimes, Red Hat JBoss Enterprise Application Platform, XStream, SonarQube, woodstox, Red Hat Integration Camel Quarkus, Red Hat Integration Camel for Spring Boot, Red Hat Integration Service Registry, Red Hat Process Automation Manager, OpenShift Developer Tools and Services for OCP |
Timeline
- Dec 6, 2023 CVE Published
- Dec 11, 2023 CVE Updated
References
- https://github.com/x-stream/xstream/issues/304 url
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47434 url
- https://security-tracker.debian.org/tracker/CVE-2022-40152 url
- https://access.redhat.com/security/cve/CVE-2022-40152 url
- https://ubuntu.com/security/CVE-2022-40152 url
- https://www.suse.com/security/cve/CVE-2022-40152.html url