Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-6481

Logback "receiver" DOS vulnerability CVE-2023-6378 incomplete fix

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QOS.CH Sarl logback

Default version status: unaffected

  • 1.4.14unaffected
  • 1.3.14unaffected
  • 1.2.13unaffected

References