CVE-2018-10237

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2018-10237
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10237.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-10237
Aliases
Downstream
Related
Published
2018-04-26T21:29:00.230Z
Modified
2026-04-10T04:03:55.421501Z
Severity
  • 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.

References

Affected packages

Git / github.com/google/guava

Affected ranges

Type
GIT
Repo
https://github.com/google/guava
Events
Introduced
5a6bf80c7403d77df18adb41b5b15ea34d28186d
Fixed
49fad5af840b2a28dd0dc24ecfd58b4baa8d67bc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9df9a23de5323275f5614aa7e732a636029f9b70
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
00efa0ca1b0ab665d1f3d6deacbb156cf797ebdf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
00efa0ca1b0ab665d1f3d6deacbb156cf797ebdf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
00efa0ca1b0ab665d1f3d6deacbb156cf797ebdf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
798803f026bb9517bcf4e0e9ab2d2e0345023182
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
798803f026bb9517bcf4e0e9ab2d2e0345023182
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
daa84b68f31898f67a51207e193ee2ddabb088bf
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ce15119ae3b8ea71bdfd43bd6a0b96f851187d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2537d1ed4795f8fad737a7bf6d6f93fbdfa28e54
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7ce15119ae3b8ea71bdfd43bd6a0b96f851187d0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2537d1ed4795f8fad737a7bf6d6f93fbdfa28e54
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
904234dc2f365314c636d29385780faf72db2477
Database specific 
{
    "versions": [
        {
            "introduced": "11.0"
        },
        {
            "fixed": "24.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "18.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "18c"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "19c"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "15.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "17.0"
        }
    ]
}

Affected versions

Other
jdk5-backport-branch-point
release
v13.*
v13.0-final
v13.0-rc2
v15.*
v15.0
v15.0-rc1
v16.*
v16.0
v16.0-rc1
v17.*
v17.0
v17.0-rc1
v17.0-rc2
v18.*
v18.0
v18.0-rc1
v18.0-rc2
v19.*
v19.0
v19.0-rc1
v19.0-rc2
v19.0-rc3
v2.*
v2.0
v24.*
v24.1
v4.*
v4.0
v7.*
v7.0

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "3.11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "4.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "4.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "6.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "14.1.0"
            },
            {
                "last_affected": "14.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.0.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.3.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.0.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.1.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "7.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "12.2.1.3.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10237.json"