| 标题 | LatencyUtils 2.0.3 PauseDetector DOS |
|---|
| 描述 | LatencyUtils uses a background thread to detect system pauses (like GC stalls) and correct latency measurements for coordinated omission. When a detected pause exceeds the configured maximum (highestTrackableLatency), the underlying HdrHistogram library throws an ArrayIndexOutOfBoundsException. Because this exception is unhandled by the background thread, the thread crashes permanently, causing LatencyUtils to stop detecting all future pauses and effectively disabling its core functionality. |
|---|
| 来源 | ⚠️ https://github.com/LatencyUtils/LatencyUtils/issues/22 |
|---|
| 用户 | Yu Bao from PayPal Cyber Security Team (UID 99838) |
|---|
| 提交 | 2026-07-16 05時54分 (2 月前) |
|---|
| 管理 | 2026-08-30 08時25分 (2 months later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 397091 [LatencyUtils 直到 2.0.3 PauseDetector LatencyStats.java LatencyStats.recordDetectedPause 内存损坏] |
|---|
| 积分 | 20 |
|---|