{"action":"Upgrade org.apache.kafka:kafka to 2.8.2 (2.8.x), 3.0.2 (3.0.x), 3.1.2 (3.1.x) or 3.2.3 (3.2.x) or later.","affected":[{"fixed":"2.8.2","introduced":"2.8.0"},{"fixed":"3.0.2","introduced":"3.0.0"},{"fixed":"3.1.2","introduced":"3.1.0"},{"fixed":"3.2.3","introduced":"3.2.0"}],"component":"org.apache.kafka:kafka","cve_ids":["CVE-2022-34917"],"ecosystem":"Maven","epss":0.01483,"exploited":false,"fixed_versions":["2.8.2","3.0.2","3.1.2","3.2.3"],"ghsa_id":"GHSA-c9h3-c6qj-hh7q","id":"tcs_01M5N8S1HP0HNY98NHX0DRXZJC","modified_at":"2024-05-08T17:44:34Z","published_at":"2022-09-21T00:00:52Z","references":["https://osv.dev/vulnerability/GHSA-c9h3-c6qj-hh7q","https://nvd.nist.gov/vuln/detail/CVE-2022-34917","https://github.com/apache/kafka/commit/14951a83e3fdead212156e5532359500d72f68bc","https://github.com/apache/kafka/commit/2bfa24b2bd416e7b8c4a0c566b984c43904fdecb","https://github.com/apache/kafka/commit/aaceb6b79bfcb1d32874ccdbc8f3138d1c1c00fb","https://github.com/apache/kafka/commit/c1295662768e64b4467e27c3d5158f95f2307657","https://issues.apache.org/jira/browse/KAFKA-14063","https://kafka.apache.org/cve-list","https://kafka.apache.org/cve-list#CVE-2022-34917"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c9h3-c6qj-hh7q","url":"https://osv.dev/vulnerability/GHSA-c9h3-c6qj-hh7q"}],"summary":"Apache Kafka vulnerability can lead to brokers hitting OutOfMemoryException, causing Denial of Service"}