CVE-2022-25897

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-25897

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25897.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-25897

Aliases

GHSA-fph9-f5r6-vhqf

Published

2022-09-08T05:05:12.190Z

Modified

2026-07-15T02:05:16.056585898Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P CVSS Calculator

Summary

Denial of Service (DoS)

Details

The package org.eclipse.milo:sdk-server before 0.6.8 are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25897.json",
    "cna_assigner": "snyk"
}

References

Affected packages

Git / github.com/eclipse-milo/milo

Affected ranges

Type

GIT

Repo

https://github.com/eclipse-milo/milo

Events

Introduced

Fixed

0795141a1c855365993354e8d5f6577bd68cb12d

Fixed

4534381760d7d9f0bf00cbf6a8449bb0d13c6ce5

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.6.8"
        }
    ],
    "source": [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

v0.*

v0.1.1

v0.1.2

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.2.0

v0.4.3

v0.6.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25897.json"