~ / search / GHSA-gfx6-ph4q-q54q

GHSA-gfx6-ph4q-q54q

Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core

Source: GitHub Advisory Database (reviewed) High CVE-2017-1000118

Packages

EcosystemPackageAffectedFixed in
Maven com.typesafe.akka:akka-http-core_2.12 < 10.0.6 10.0.6
Maven com.typesafe.akka:akka-http-core_2.11 < 10.0.6 10.0.6

Details

As written in the advisory (Markdown source, shown as plain text).

Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service

References

External links from the advisory. They lead to third-party sites.