CVE-2021-43045

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.

Score

CVSS 3.1 7.5 High

Status

Modified - security@apache.org

Published

2022-01-06

Last modified

2024-08-04

Weaknesses

CWE-770

Affected products

• Avro (Apache)
• Apache Avro (Apache Software Foundation)

References

• http://www.openwall.com/lists/oss-security/2022/01/06/8
• https://lists.apache.org/thread/5fttw9vk6gd2p3b846nox7hcj5469xfd