GHSA-8hmh-mhqv-7638
Suggest an improvement- Source
- https://github.com/advisories/GHSA-8hmh-mhqv-7638
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-8hmh-mhqv-7638
- Aliases
-
- CVE-2008-7227
- Withdrawn
- 2024-07-10T19:35:20Z
- Published
- 2022-05-17T05:51:58Z
- Modified
- 2026-09-10T03:49:21Z
- Summary
- PartialBufferOutputStream2 flush issues
- Details
-
Withdrawn
This advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.
Original Advisory
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
- Database specific
{ "cwe_ids": [ "CWE-119" ], "github_reviewed": true, "github_reviewed_at": "2024-07-09T19:40:12Z", "nvd_published_at": "2009-09-14T14:30:00Z", "severity": "MODERATE" }- References
Affected packages
Maven / org.geoserver:gs-main
Package
- Name
- org.geoserver:gs-main
- View open source insights on deps.dev
- Purl
- pkg:maven/org.geoserver/gs-main
Maven / org.geoserver.web:gs-web-app
Package
- Name
- org.geoserver.web:gs-web-app
- View open source insights on deps.dev
- Purl
- pkg:maven/org.geoserver.web/gs-web-app