{"id":"CVE-2008-7227","aliases":["EUVD-2022-3188","GHSA-8hmh-mhqv-7638"],"status":"published","title":"PartialBufferOutputStream2 flush issues","description":"PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00926,"percentile":0.60681,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2009-09-14T14:00:00Z","modified":"2026-09-10T03:49:21Z","products":[{"vendor":"geoserver","product":"geoserver"}],"references":[{"url":"http://osvdb.org/43266","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://jira.codehaus.org/browse/GEOS-1747","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7227","tags":["advisory"]},{"url":"https://osgeo-org.atlassian.net/browse/GEOS-1747","tags":["web"]},{"url":"https://github.com/github/advisory-database/pull/4585","tags":["web"]},{"url":"https://github.com/advisories/GHSA-8hmh-mhqv-7638"}],"sources":{"cve":[{"id":"CVE-2008-7227","description":"PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","status":"published","published":"2009-09-14T14:00:00Z","modified":"2024-09-17T01:30:39.429Z","updated_at":"2026-11-02T14:34:48.103804Z"}],"euvd":[{"id":"EUVD-2022-3188","description":"PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","status":"published","published":"2009-09-14T14:00:00Z","modified":"2024-09-17T01:30:39Z","updated_at":"2026-11-03T00:28:49.329777Z"}],"ghsa":[{"id":"GHSA-8hmh-mhqv-7638","title":"PartialBufferOutputStream2 flush issues","description":"### Withdrawn\nThis advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.\n\n### Original Advisory\nPartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","status":"withdrawn","published":"2022-05-17T05:51:58Z","modified":"2024-07-10T19:35:20Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:37:56.530214Z"}],"nvd":[{"id":"CVE-2008-7227","description":"PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","status":"published","published":"2009-09-14T14:30:00.377Z","modified":"2026-06-16T23:03:52.237Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:32.081314Z"}],"osv":[{"id":"GHSA-8hmh-mhqv-7638","title":"PartialBufferOutputStream2 flush issues","description":"### Withdrawn\nThis advisory has been withdrawn as there the effects of the bug would only give the caller an incomplete view of data which they would be authorized to see.\n\n### Original Advisory\nPartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an \"in memory buffer,\" which prevents the reporting of a service exception, with unknown impact and attack vectors.","status":"withdrawn","published":"2022-05-17T05:51:58Z","modified":"2026-09-10T03:49:21.305734436Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:42.437513Z"}]}}