CVE-2022-35724CWE-20CWE-770

Denial of service while reading data in Avro Rust SDK

published August 9, 2022

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01770 · 78.0th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2022-08-09T06:50Z
EPSS history
Timeline
  • 09 AUG 06:50Z
    Denial of service while reading data in Avro Rust SDK
    cvelistv5