Improper resource allocation In ceph
Description
A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel10 | - | - | |
rpm rhel10 | - | - | |
rpm rhel9 | - | - | |
 maven | 2.18.8, 2.21.4 | ||
maven | 3.1.4 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3. 4. 5.