You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@avro.apache.org by Ryan Skraba <rs...@apache.org> on 2022/01/06 17:48:38 UTC

CVE-2021-43045: Apache Avro: Possible DOS vulnerabilities in C# Avro SDK

Description:

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack.  This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions.  Users should update to version 1.11.0 which addresses this issue.

This issue is being tracked as AVRO-3225,AVRO-3226

Credit:

Apache Avro would like to thank Philip Sanetra for reporting this issue.