Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.
Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2024/10/03/1 | Mailing List Third Party Advisory |
| https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x | Mailing List Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20241011-0003/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
10 Jul 2025, 21:04
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x - Mailing List, Vendor Advisory | |
| CWE | ||
| First Time |
Netapp brocade San Navigator
Apache Netapp Netapp active Iq Unified Manager Apache avro |
|
| CPE | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:brocade_san_navigator:-:*:*:*:*:*:*:* cpe:2.3:a:apache:avro:*:*:*:*:*:-:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* |
03 Oct 2024, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-03 11:15
Updated : 2025-07-10 21:04
NVD link : CVE-2024-47561
Mitre link : CVE-2024-47561
JSON object : View
Products Affected
netapp
- active_iq_unified_manager
- brocade_san_navigator
apache
- avro
CWE
No CWE.