Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8 MGASA-2022-0340 Critical: Google Gson Denial Of Service

mageia
Calendar Grey September 21, 2022
Dist Mageia Esm H88
The latest release of the google-gson library addresses a security flaw reported in the Mageia security advisory MGASA-2022-0340.
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS atta...

Summary

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks. (CVE-2022-25647)

References

- https://bugs.mageia.org/show_bug.cgi?id=30541

-

- https://lists.debian.org/debian-lts-announce/2022/09/msg00009.html

- https://lists.debian.org/debian-security-announce/2022/msg00196.html

- https://www.cve.org/CVERecord?id=CVE-2022-25647

Topics%20covered

Topics Covered

security advisory denial of service software update critical risk mageia google gson

Resolution

SRPMS

- 8/core/google-gson-2.8.6-1.1.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 21 Sep 2022
URL: https://advisories.mageia.org/MGASA-2022-0340.html
Type: security
CVE: CVE-2022-25647

Topics%20covered

Topics Covered

security advisory denial of service software update critical risk mageia google gson

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here