~ / search / GHSA-868x-rg4c-cjqg

GHSA-868x-rg4c-cjqg

Allocation of Resources Without Limits or Throttling in Apache Avro

Source: GitHub Advisory Database (reviewed) High CVE-2021-43045

Packages

EcosystemPackageAffectedFixed in
NuGet Apache.Avro < 1.11.0 1.11.0

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.

References

External links from the advisory. They lead to third-party sites.