Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating).
This issue affects Apache Seata (incubating): through <=2.2.0.
Users are recommended to upgrade to version 2.3.0, which fixes the issue.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2025/03/19/6 | Mailing List Third Party Advisory |
| https://lists.apache.org/thread/grn0x8tmssx07qc9z50lwgmrkwzrrhzg | Mailing List Vendor Advisory |
Configurations
History
01 Apr 2025, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:apache:seata:*:*:*:*:*:*:*:* | |
| First Time |
Apache seata
Apache |
|
| References | () https://lists.apache.org/thread/grn0x8tmssx07qc9z50lwgmrkwzrrhzg - Mailing List, Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2025/03/19/6 - Mailing List, Third Party Advisory |
20 Mar 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
20 Mar 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-20 09:15
Updated : 2025-04-01 20:35
NVD link : CVE-2024-54016
Mitre link : CVE-2024-54016
JSON object : View
Products Affected
apache
- seata
CWE
No CWE.