XStream Denial of Service Vulnerability Warning

2023-03-31

Respectful master's command:

Hello! Recently, Xstream officially issued a security bulletin, revealing that there is a high-risk denial of service vulnerability (CVE-2022-41966) in versions before 1.4.20. The details of the vulnerability have been disclosed in the POC, and the risk is relatively high.

[Vulnerability Rating]

High risk

[Vulnerability description]

CVE-2022-41966

This vulnerability allows a remote attacker to trigger a stack overflow by manipulating the processed input stream, causing the application to terminate, resulting in a denial of service.

[scope of influence]

affected version

XStream < 1.4.20

[Repair Plan]

The vulnerability has been officially fixed in a higher version. Affected users are advised to upgrade to a safe version:

http://x-stream.github.io/download.html

[Reference link]

https://x-stream.github.io/CVE-2022-41966.html

https://github.com/x-stream/xstream/security/advisories/GHSA-j563-grx4-pjpv

Back to List