Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-23496

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-c4pm-63cg-9j7h

Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List ### Impact Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. Applications that do not use this feature are not affected. ### Patches Upgrade to 7.9.0 ### Workarounds Catch and discard any exceptions from Yauaa.

gitlab/maven/nl.basjes.parse.useragent/yauaa-beam/GMS-2022-8074

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-beam-sql/GMS-2022-8075

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-drill/GMS-2022-8076

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-elasticsearch-8/GMS-2022-8078

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-elasticsearch/GMS-2022-8077

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-flink/GMS-2022-8079

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-flink-table/GMS-2022-8080

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa/GMS-2022-8073

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-hive/GMS-2022-8081

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-logparser/GMS-2022-8082

Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List ### Impact Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. Applications that do not use this feature are not affected. ### Patches Upgrade to 7.9.0 ### Workarounds Catch and discard any exceptions from Yauaa.

gitlab/maven/nl.basjes.parse.useragent/yauaa-nifi-processors/GMS-2022-8083

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-snowflake/GMS-2022-8084

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.

gitlab/maven/nl.basjes.parse.useragent/yauaa-trino/GMS-2022-8085

ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.