← CVE Intelligence

CVE-2022-35724

Denial of service while reading data in Avro Rust SDK PUBLISHED

Description (CNA)

It is possible to provide data to be read that leads the reader to loop in cycles endlessly, consuming CPU. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.

Affected (CNA)

Vendor / productVersions
Apache Software Foundation / Apache Avroaffected unspecified before 0.14.0

CWE

CWE-20, CWE-770

References

ADP enrichment

CVE

No English description supplied.