Apache Avro (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-08-09. Vendor: Apache Software Foundation.

CVEs of Apache Avro

• CVE-2022-36125 - CVSS 7.5 (high), 2022-08-09: It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust SDK prior…
• CVE-2022-36124 - CVSS 7.5 (high), 2022-08-09: It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust…
• CVE-2022-35724 - CVSS 7.5 (high), 2022-08-09: It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache…
• CVE-2021-43045 - CVSS 7.5 (high), 2022-01-06: A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue…