Описание
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libjettison-java | fixed | 1.5.4-1 | package | |
| libjettison-java | no-dsa | bookworm | package | |
| libjettison-java | no-dsa | bullseye | package | |
| libjettison-java | postponed | buster | package |
Примечания
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
https://github.com/jettison-json/jettison/issues/60
https://github.com/jettison-json/jettison/pull/62
https://github.com/jettison-json/jettison/commit/c20a8be23f698d7d89b7ccf8d328971cf4709b9f (jettison-1.5.4)
Introduced by: https://github.com/jettison-json/jettison/commit/be193159085b9fc2bc3526f8655871f9b0472d06 (jettison-1.3.1)
Связанные уязвимости
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
