CVE-2022-34917
1 advisory.
Maven/org.apache.kafka:kafka CVE-2022-34917: high 7.5
Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service
Action: Upgrade org.apache.kafka:kafka to 2.8.2 (2.8.x), 3.0.2 (3.0.x), 3.1.2 (3.1.x) or 3.2.3 (3.2.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.8.0 | 2.8.2 | - |
| 3.0.0 | 3.0.2 | - |
| 3.1.0 | 3.1.2 | - |
| 3.2.0 | 3.2.3 | - |
Fixed versions
| 2.8.2 | 3.0.2 | 3.1.2 | 3.2.3 |
Sources
- osv: GHSA-c9h3-c6qj-hh7q
- https://nvd.nist.gov/vuln/detail/CVE-2022-34917
- https://github.com/apache/kafka/commit/14951a83e3fdead212156e5532359500d72f68bc
- https://github.com/apache/kafka/commit/2bfa24b2bd416e7b8c4a0c566b984c43904fdecb
- https://github.com/apache/kafka/commit/aaceb6b79bfcb1d32874ccdbc8f3138d1c1c00fb
- https://github.com/apache/kafka/commit/c1295662768e64b4467e27c3d5158f95f2307657
- https://issues.apache.org/jira/browse/KAFKA-14063
- https://kafka.apache.org/cve-list
- https://kafka.apache.org/cve-list#CVE-2022-34917
CVE-2022-34917 · published · modified · JSON