VDB
BDU%3A2023-09014
BDU%3A2023-09014
PUBLISHED
CVSS 7.300000190734863 HIGH
Уязвимость пакета com.google.code.gson:gson библиотеки Gson, позволяющая нарушителю выполнить атаку типа «отказ в обслуживании» (DoS)
Risk Scores
CVSS 2.0
7.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Novell Inc., Oracle Corp., NetApp Inc., АО "НППКТ", Google Inc | Red Hat JBoss Fuse, Debian GNU/Linux, Red Hat Single Sign-On, openSUSE Tumbleweed, Oracle Retail Order Broker, Red Hat JBoss Data Grid, A-MQ Clients, Suse Linux Enterprise Server, Red Hat build of Quarkus, Red Hat Integration Camel K, Red Hat Integration Service Registry, OpenSUSE Leap, Red Hat Integration Camel Quarkus, Red Hat Data Grid, Red Hat JBoss Enterprise Application Platform Expansion Pack, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Proxy, Suse Linux Enterprise Desktop, SUSE Enterprise Storage, SUSE Manager Server, SUSE Linux Enterprise Module for Development Tools, SUSE Manager Retail Branch Server, Active IQ Unified Manager for Microsoft Windows, Active IQ Unified Manager for VMware vSphere, Red Hat OpenShift Container Platform, Red Hat Integration Change Data Capture, Red Hat AMQ Online, GraalVM Enterprise Edition, Decision Manager, Oracle Financial Services Crime and Compliance Management Studio, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), Red Hat JBoss A-MQ, Red Hat JBoss Enterprise Application Platform, Management Service for Element Software and NetApp Hci, Active IQ Unified Manager for Linux, OpenShift Developer Tools and Services for OCP, Red Hat Process Automation Manager, Logging subsystem for Red Hat OpenShift, Red Hat AMQ Streams, Cryostat, Red Hat build of Eclipse Vert.x, Red Hat Integration Data Virtualisation Operator, Red Hat support for Spring Boot, SUSE Manager Server Module, Gson |
Timeline
- Dec 22, 2023 CVE Published
- Jan 11, 2024 CVE Updated
References
- https://www.suse.com/security/cve/CVE-2022-25647.html url
- https://security.netapp.com/advisory/ntap-20220901-0009/ url
- https://www.oracle.com/security-alerts/cpujul2022.html url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.6/ url
- https://github.com/google/gson/pull/1991 advisory
- https://security-tracker.debian.org/tracker/CVE-2022-25647 advisory
- https://access.redhat.com/security/cve/CVE-2022-25647 advisory