Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-23460

Опубликовано: 19 авг. 2022
Источник: nvd
CVSS3: 5.9
CVSS3: 7.5
EPSS Низкий

Описание

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hjiang:json\+\+:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:hjiang:json\+\+:1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 61%
0.0041
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-121
CWE-674

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx json parsing may lead to stack exhaustion in an address sanitized (ASAN) build. This issue may lead to Denial of Service if the program using the jsonxx library crashes. This issue exists on the current commit of the jsonxx project and the project itself has been archived. Updates are not expected. Users are advised to find a replacement.

EPSS

Процентиль: 61%
0.0041
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-121
CWE-674