CVE-2024-47561 — HIGH (7.3)

Q: How severe is CVE-2024-47561?

CVE-2024-47561 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2024-47561?

Check the references section above for vendor advisories and patch information. Affected products include: Apache Avro, Netapp Active Iq Unified Manager, Netapp Brocade San Navigator.

Vulnerability Description

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Apache	Avro	< 1.11.4
Netapp	Active Iq Unified Manager	-
Netapp	Brocade San Navigator	-

Related Weaknesses (CWE)

CWE-502

References

https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5xMailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2024/10/03/1Mailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20241011-0003/Third Party Advisory

FAQ

What is CVE-2024-47561?

CVE-2024-47561 is a vulnerability with a CVSS score of 7.3 (HIGH). Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this is...

How severe is CVE-2024-47561?

CVE-2024-47561 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-47561?

Check the references section above for vendor advisories and patch information. Affected products include: Apache Avro, Netapp Active Iq Unified Manager, Netapp Brocade San Navigator.