Threats Tagged 'ghsa-wpjj-864q-ggc9'

Eclipse Vert.x versions 4.0.0 through 4.5.34, 5.0.0 through 5.0.12, 5.1.0 through 5.1.9, and version 5.2.0 contain a vulnerability in the vertx-mysql-client component. The client pre-allocates an array for column definitions based on a server-declared column count without validating an upper bound. A malicious or compromised MySQL server or a man-in-the-middle attacker can exploit this by sending a result set with an extremely large column count, causing an OutOfMemoryError that crashes the Netty event loop thread and results in a denial of service for all connections and verticles in the application.