Description

The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any check. If a malicious server returns a huge value in the header, then it can help to implement a DoS attack.

Remediation

References

https://mail-archives.apache.org/mod_mbox/olingo-user/201912.mbox/%3CCAGSZ4d65UmudJ_MQkFXEv9YY_wwZbRA3sgtNDzMoLM51Qh%3DRCA%40mail.gmail.com%3E

Related Vulnerabilities

CVE-2020-7599 Vulnerability in maven package com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin

CVE-2019-16550 Vulnerability in maven package org.jenkins-ci.plugins.m2release:m2release

CVE-2023-29206 Vulnerability in maven package org.xwiki.platform:xwiki-platform-skin-skinx

CVE-2022-34209 Vulnerability in maven package org.jenkins-ci.plugins:threadfix

CVE-2021-21626 Vulnerability in maven package io.jenkins.plugins:warnings-ng

Severity

High

Classification

CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Mailing List Vendor Advisory