CVE-2021-43045CWE-770

Possible DOS vulnerabilities in C# Avro SDK

published January 6, 2022

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02960 · 87.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2022-01-06T18:00Z
EPSS history
Timeline
  • 06 JAN 18:00Z
    Possible DOS vulnerabilities in C# Avro SDK
    cvelistv5