trino-config

8 results · Clear filters · Feed

• High 8.2
  CVE-2025-55163 Public exploit

  Netty MadeYouReset HTTP/2 DDoS Vulnerability

  Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …

  netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Aug 13, 2025
• High 8.8
  CVE-2025-48734 Public exploit

  Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default

  Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this…

  Apache Software Foundation Apache Commons BeanUtils 2.x Apache Commons BeanUtils 1.x druid Debian Ubuntu Azure Linux Wolfi Maven
  May 28, 2025
• High 8.6
  CVE-2024-36114 Public exploit

  Decompressors can crash the JVM and leak memory content in Aircompressor

  Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor (LZ4, LZO, Snappy, Zstandard) can crash the JVM for certain input, and in some cases also leak the c…

  airlift aircompressor druid trino Wolfi Maven
  May 29, 2024
• Medium 5.5
  CVE-2024-26308 Public exploit

  Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

  Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

  Apache Software Foundation Apache Commons Compress druid trino Debian Ubuntu Wolfi Maven
  Feb 19, 2024
• Medium 5.9
  CVE-2023-3635 Public exploit

  Okio GzipSource unhandled exception Denial of Service

  GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

  thingsboard-tb-node thingsboard-tb-mqtt-transport trino trino-plugin-opensearch Ubuntu Wolfi Maven
  Jul 12, 2023
• High 7.5
  CVE-2022-3509 Public exploit

  Parsing issue in protobuf textformat

  A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages wit…

  Google Protocolbuffers trino trino-plugin-opensearch Debian Ubuntu Wolfi Maven
  Nov 1, 2022
• High 7.5
  CVE-2021-22569 Public exploit

  Denial of Service of protobuf-java parsing procedure

  An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived o…

  Google protobuf-java google-protobuf [JRuby Gem] protobuf-kotlin Debian Ubuntu Azure Linux Wolfi Maven RubyGems
  Jan 7, 2022
• High 7.5
  CVE-2019-0205 Public exploit

  Loop with Unreachable Exit Condition in Apache Thrift

  In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects o…

  Apache Apache Thrift druid trino Debian Azure Linux Wolfi Maven
  Oct 28, 2019