UpHeron
All vulnerabilities

Servers and applications

CVE-2018-10237

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation…

Severity
Medium 5.9
Published
26 Apr 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
8.4% in the next 30 daysHigher than 95% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Oracle WebLogic ServerServers and applications · cpe:a:oracle:weblogic_server
  • Version 12.2.1.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-10237
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-10237