GHSA-868x-rg4c-cjqgHighCVSS 7.5

Allocation of Resources Without Limits or Throttling in Apache Avro

Published
January 8, 2022
Last Modified
September 26, 2023

🔗 CVE IDs covered (1)

CVE-2021-43045 →

📋 Description

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this issue.

🎯 Affected products1

  • nuget/Apache.Avro:< 1.11.0

🔗 References (7)