Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

fstec логотип

BDU:2023-07864

Опубликовано: 23 дек. 2022
Источник: fstec
CVSS3: 8.8
CVSS2: 9
EPSS Средний

Описание

Уязвимость метода parse библиотеки json5 пакетного менеджера NPM связана с неконтролируемым изменением атрибутов прототипа объекта. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Вендор

Red Hat Inc.
Сообщество свободного программного обеспечения
АО "НППКТ"

Наименование ПО

Red Hat Single Sign-On
Red Hat Integration Camel K
Red Hat Integration Camel Quarkus
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift GitOps
Red Hat Satellite
Red Hat Integration Camel for Spring Boot
Migration Toolkit for Virtualization
Red Hat OpenShift Virtualization
Red Hat Discovery
Red Hat Migration Toolkit for Containers
Red Hat Advanced Cluster Security
Red Hat OpenShift Dev Spaces
OpenShift Pipelines
Red Hat OpenShift distributed tracing
Red Hat Enterprise Linux Server
JSON5
ОСОН ОСнова Оnyx

Версия ПО

7 (Red Hat Single Sign-On)
- (Red Hat Integration Camel K)
- (Red Hat Integration Camel Quarkus)
2 (Red Hat Advanced Cluster Management for Kubernetes)
- (Red Hat OpenShift GitOps)
6 (Red Hat Satellite)
- (Red Hat Integration Camel for Spring Boot)
- (Migration Toolkit for Virtualization)
4 (Red Hat OpenShift Virtualization)
- (Red Hat Discovery)
1.7 (Red Hat Migration Toolkit for Containers)
3 (Red Hat Advanced Cluster Security)
- (Red Hat OpenShift Dev Spaces)
- (OpenShift Pipelines)
- (Red Hat OpenShift distributed tracing)
8 (Red Hat Enterprise Linux Server)
7.6 for RHEL 7 (Red Hat Single Sign-On)
7.6 for RHEL 8 (Red Hat Single Sign-On)
7.6 for RHEL 9 (Red Hat Single Sign-On)
до 1.0.2 (JSON5)
от 2.0.0 до 2.2.2 (JSON5)
до 2.9 (ОСОН ОСнова Оnyx)

Тип ПО

Сетевое программное средство
Прикладное ПО информационных систем
Сетевое средство
ПО виртуализации/ПО виртуального программно-аппаратного средства
Операционная система

Операционные системы и аппаратные платформы

Сообщество свободного программного обеспечения Debian GNU/Linux 10
Сообщество свободного программного обеспечения Debian GNU/Linux 11
Сообщество свободного программного обеспечения Debian GNU/Linux 12
Fedora Project Fedora 37
Red Hat Inc. Red Hat Enterprise Linux Server 8
АО "НППКТ" ОСОН ОСнова Оnyx до 2.9

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 9)
Высокий уровень опасности (базовая оценка CVSS 3.0 составляет 8,8)

Возможные меры по устранению уязвимости

Использование рекомендаций:
Для json5:
https://github.com/json5/json5/issues/199
https://github.com/json5/json5/issues/295
https://github.com/json5/json5/pull/298
Для Fedora:
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3S26TLPLVFAJTUN3VIXFDEBEXDYO22CE/
Для Debian GNU/Linux:
https://security-tracker.debian.org/tracker/CVE-2022-46175
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/cve-2022-46175
Для ОСОН ОСнова Оnyx:
Обновление программного обеспечения node-json5 до версии 0.5.1-1+deb10u1

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Существует в открытом доступе

Информация об устранении

Уязвимость устранена

Идентификаторы других систем описаний уязвимостей

EPSS

Процентиль: 97%
0.39945
Средний

8.8 High

CVSS3

9 Critical

CVSS2

Связанные уязвимости

CVSS3: 7.1
ubuntu
около 3 лет назад

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, ...

CVSS3: 8.8
redhat
около 3 лет назад

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, ...

CVSS3: 7.1
nvd
около 3 лет назад

JSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including versions 1.0.1 and 2.2.1 does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, ele

CVSS3: 8.8
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 7.1
debian
около 3 лет назад

JSON5 is an extension to the popular JSON file format that aims to be ...

EPSS

Процентиль: 97%
0.39945
Средний

8.8 High

CVSS3

9 Critical

CVSS2