| Titolo | LatencyUtils 2.0.3 PauseDetector DOS |
|---|
| Descrizione | LatencyUtils uses a background thread to detect system pauses (like GC stalls) and correct latency measurements for coordinated omission. When a detected pause exceeds the configured maximum (highestTrackableLatency), the underlying HdrHistogram library throws an ArrayIndexOutOfBoundsException. Because this exception is unhandled by the background thread, the thread crashes permanently, causing LatencyUtils to stop detecting all future pauses and effectively disabling its core functionality. |
|---|
| Fonte | ⚠️ https://github.com/LatencyUtils/LatencyUtils/issues/22 |
|---|
| Utente | Yu Bao from PayPal Cyber Security Team (UID 99838) |
|---|
| Sottomissione | 16/07/2026 05:54 (2 mesi fa) |
|---|
| Moderazione | 30/08/2026 08:25 (2 months later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 397091 [LatencyUtils fino a 2.0.3 PauseDetector LatencyStats.java LatencyStats.recordDetectedPause buffer overflow] |
|---|
| Punti | 20 |
|---|