Red Hat Security AdvisoryRHSA-2022:5029
Red Hat build of Eclipse Vert.x 4.2.7 security update
Released 2022-06-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat build of Eclipse Vert.x 4.2.7
Fixes 2 records
Priority MEDIUM 50
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.
CVSS 3.1HIGH 7.7· Network · No auth · No interaction · EPSS 0.1223 · Published 2022-05-01 · Partial fix · 2.8.9 CWE-502
Priority MEDIUM 47
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0486 · Published 2022-03-11 · Partial fix · 2.13.2.1, 2.12.6.1 CWE-787
