{"id":"GHSA-8hmh-mhqv-7638","summary":"PartialBufferOutputStream2 flush issues","details":"### Withdrawn\nThis advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.\n\n### Original Advisory\nPartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","aliases":["CVE-2008-7227"],"modified":"2026-09-10T03:49:21.305734436Z","published":"2022-05-17T05:51:58Z","withdrawn":"2024-07-10T19:35:20Z","database_specific":{"nvd_published_at":"2009-09-14T14:30:00Z","cwe_ids":["CWE-119"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2024-07-09T19:40:12Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7227"},{"type":"WEB","url":"https://github.com/github/advisory-database/pull/4585"},{"type":"WEB","url":"https://osgeo-org.atlassian.net/browse/GEOS-1747"},{"type":"WEB","url":"http://osvdb.org/43266"}],"affected":[{"package":{"name":"org.geoserver:gs-main","ecosystem":"Maven","purl":"pkg:maven/org.geoserver/gs-main"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json"}},{"package":{"name":"org.geoserver.web:gs-web-app","ecosystem":"Maven","purl":"pkg:maven/org.geoserver.web/gs-web-app"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-8hmh-mhqv-7638/GHSA-8hmh-mhqv-7638.json"}}],"schema_version":"1.9.0"}