Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Address CVE-2024-47561: Apache Avro Vulnerable to Arbitrary Code Execution via Specially Crafted Schema Data #356

Open
rnaval opened this issue Oct 8, 2024 · 0 comments
Open

Address CVE-2024-47561: Apache Avro Vulnerable to Arbitrary Code Execution via Specially Crafted Schema Data #356

rnaval opened this issue Oct 8, 2024 · 0 comments

Comments

@rnaval
Copy link

rnaval commented Oct 8, 2024 •
edited
Loading

Schema parsing in Apache Avro allows bad actors to execute arbitrary code by supplying specially crafted schema data.

image

How to fix it
Solution - Fix Available
Fixed in version 1.11.4-rc1 by this commit.

The latest releases can be found here.
@rnaval rnaval changed the title Address CVE-2024-47561 Address CVE-2024-47561: Apache Avro Vulnerable to Arbitrary Code Execution via Specially Crafted Schema Data Oct 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@rnaval