An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates the compressed SAML payload into memory. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| Spring | Spring Security | 5.7.0 – < 5.7.24, 5.8.0 – < 5.8.26, 6.3.0 – < 6.3.17, 6.4.0 – < 6.4.17, 6.5.0 – < 6.5.10.2, 7.0.0 – < 7.0.5.1 | |
| vmware | spring security | 5.7.0 – < 5.7.24 |
cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* ≥ 5.7.0 < 5.7.24cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* ≥ 5.8.0 < 5.8.26cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* ≥ 6.3.0 < 6.3.17cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* ≥ 6.4.0 < 6.4.17cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* ≥ 6.5.0 < 6.5.10.2cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.5.1Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.