漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Infinispan: circular reference on marshalling leads to dos
Vulnerability Description
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
N/A
Vulnerability Title
Red Hat Infinispan 安全漏洞
Vulnerability Description
Red Hat Infinispan是美国红帽(Red Hat)公司的一套分布式缓存和键值NoSQL数据存储软件。 Red Hat Infinispan 存在安全漏洞,该漏洞源于在解组时不检测循环对象引用,攻击者利用该漏洞可以将恶意构造的对象插入到缓存中,并导致内存不足实现拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A