High severity7.5NVD Advisory· Published Dec 4, 2019· Updated Jun 17, 2026
CVE-2019-17555
CVE-2019-17555
Description
The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any check. If a malicious server returns a huge value in the header, then it can help to implement a DoS attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.olingo:odata-client-coreMaven | >= 4.0.0, < 4.7.0 | 4.7.0 |
Affected products
3Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-477x-w7m6-c6phghsaADVISORY
- mail-archives.apache.org/mod_mbox/olingo-user/201912.mbox/%3CCAGSZ4d65UmudJ_MQkFXEv9YY_wwZbRA3sgtNDzMoLM51Qh%3DRCA%40mail.gmail.com%3EnvdMailing ListVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2019-17555ghsaADVISORY
- github.com/apache/olingo-odata4/pull/61ghsaWEB
- issues.apache.org/jira/browse/OLINGO-1411ghsaWEB
News mentions
0No linked articles in our index yet.