CVE-2020-28491

Denial of Service (DoS)

High · published February 18, 2021

CVSS v3.1
7.5
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03074 · 87.6th percentile
Published
2021-02-18T15:50Z
EPSS history
Timeline
  • 18 FEB 15:50Z
    Denial of Service (DoS)
    cvelistv5