Cx039cb67c-ead3 @ Maven-mysql:mysql-connector-java-5.1.18

[alex-ko-dev]

Vulnerable Package issue exists @ Maven-mysql:mysql-connector-java-5.1.18 in branch master

MySQL Connector/J before 5.1.37 is vulnerable to Memory Leak. The method methodCompressedInputStream.getNextPacketFromServer() of src/com/mysq/jdbc/CompressedInputStream.java has high memory and garbage collection usage caused by the consecutive instantiation of a new inflater.

Namespace: alexey-ast-test-1-org
Repository: alexey-ast-test-1-repo
Repository Url: https://github.com/alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST-Project: alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST platform scan: 360384fc-7c82-48a3-81a0-1a1e2f6064e8
Branch: master
Application: alexey-ast-test-1-repo
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-401

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 8.0.16.redhat-00001

---

References
Issue
Commit
Release Note