返回 CVE 瀏覽器

CVE-2022-40151

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-09-16

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

Affected Platforms (CPE)

📦

Xstream

Xstream

< 1.4.20

References & Advisories

🔗 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367

🔗 https://github.com/x-stream/xstream/issues/304

🔗 https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47367

🔗 https://github.com/x-stream/xstream/issues/304

相關漏洞威脅

CVE-2025-10812.3

A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects some...

CVE-2024-470727.5

XStream is a simple library to serialize objects to XML and back again. This vulnerability may allow a remote attacker to terminat...

CVE-2022-419668.2

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the appli...

CVE-2022-367997.2

This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been imple...