VDB
DEBIAN-CVE-2018-10237
DEBIAN-CVE-2018-10237
PUBLISHED
CVSS 5.900000095367432 MEDIUM
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.
Risk Scores
CVSS v3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | guava-libraries | 0, 0, 0 |
| Debian:11 | guava-libraries | 0, 0, 0 |
| Debian:14 | guava-libraries | 0, 0, 0 |
| Debian:12 | guava-libraries | 0, 0, 0 |
Timeline
- Apr 26, 2018 CVE Published
- Apr 28, 2026 CVE Updated