Most recent entries from all

bdu:2023-09014

certfr-2022-avi-656 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un dé…

certfr-2022-avi-656

EUVD-2026-321983

fkie_cve-2022-25647

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

GHSA-4jrv-ppp4-jm57 — Deserialization of Untrusted Data in Gson

Affected: Maven: com.google.code.gson:gson

The package `com.google.code.gson:gson` before 2.8.9 is vulnerable to Deserialization of Untrusted Data via the `writeReplace()` method in internal classes, which may lead to denial of service attacks.

gsd-2022-25647

OESA-2022-1663 — google-gson security update

Affected: openEuler:20.03-LTS-SP1: google-gson, openEuler:20.03-LTS-SP3: google-gson, openEuler:22.03-LTS: google-gson

Gson is a Java library that can be used to convert a Java object into its JSON representation. It can also be used to convert a JSON string into an equivalent Java object. Gson can work with arbitrary Java objects including pre-existing objects that you do not have source-code of. There are a few open-source projects that can convert Java objects to JSON. However, most of them require that you place Java annotations in your classes; something that you can not do if you do not have access to the source-code. Most also do not fully support the use of Java Generics. Gson considers both of these as very important design goals.

Security Fix(es):

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.(CVE-2022-25647)

openSUSE-SU-2024:12040-1 — google-gson-2.8.9-3.1 on GA media

google-gson-2.8.9-3.1 on GA media

RHSA-2022:4985 — Red Hat Security Advisory: Cryostat 2.1.1: new Cryostat on RHEL 8 container images

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson golang-gopkg-yaml: crash when attempting to deserialize invalid input

SUSE-SU-2022:3706-1 — Security update for google-gson

Security update for google-gson

UBUNTU-CVE-2022-25647

Affected: Ubuntu:Pro:16.04:LTS: libgoogle-gson-java, Ubuntu:Pro:18.04:LTS: libgoogle-gson-java, Ubuntu:20.04:LTS: libgoogle-gson-java, Ubuntu:22.04:LTS: libgoogle-gson-java

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

WID-SEC-W-2022-0759 — Oracle Java SE: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.