Debian/logback: high 7.5
A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data.
Action: Upgrade logback to 1:1.2.11-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.2.11-5 | - |
Fixed versions
| 1:1.2.11-5 |
Sources
- osv: DEBIAN-CVE-2023-6378#Debian:13/logback
- https://security-tracker.debian.org/tracker/CVE-2023-6378
published · modified · JSON