Описание
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| json-smart | fixed | 2.5.1-1 | package | |
| json-smart | fixed | 2.2-2+deb12u1 | bookworm | package |
| json-smart | fixed | 2.2-2+deb11u1 | bullseye | package |
Примечания
https://github.com/netplex/json-smart-v2/issues/67
https://github.com/netplex/json-smart-v2/commit/6ecff1c2974eaaab2e74e441bdf5ba8495227bf5 (2.4.5)
Security impact disputed by upstream
EPSS
Связанные уязвимости
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
Уязвимость функции indexOf() класса JSONParserByteArray библиотеки JSON Smart, позволяющая нарушителю вызвать отказ в обслуживании
EPSS