CVE-2022-40151

Name of the Vulnerable Software and Affected Versions XStream (affected versions not specified)

Description The issue is related to a Denial of Service (DOS) attack that can occur when using XStream to serialize XML data. If the parser is running on user-supplied input, an attacker may supply content that causes the parser to crash by stack overflow, potentially supporting a denial of service attack. This is due to a buffer overflow on the stack. The exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.