Description

An issue in the fetch() method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Remediation

References

https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html

https://sourceforge.net/p/ini4j/bugs/56/

Related Vulnerabilities

CVE-2021-21290 Vulnerability in maven package io.netty:netty-testsuite

CVE-2019-16869 Vulnerability in maven package io.netty:netty

CVE-2021-23377 Vulnerability in npm package onion-oled-js

CVE-2023-31544 Vulnerability in maven package org.opencms:opencms-core

CVE-2020-7628 Vulnerability in npm package umount

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Mailing List Third Party Advisory Exploit NVD-CWE-noinfo