CVE-2022-45685

Опубликовано: 13 дек. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.

Ссылки

https://github.com/jettison-json/jettison/issues/54
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
Mailing List
Third Party Advisory
https://www.debian.org/security/2023/dsa-5312
Third Party Advisory
https://github.com/jettison-json/jettison/issues/54
Exploit
Issue Tracking
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
Mailing List
Third Party Advisory
https://www.debian.org/security/2023/dsa-5312
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jettison_project:jettison:*:*:*:*:*:*:*:*

Версия до 1.5.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00131

Низкий

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVE-2022-45685

CVSS3: 7.5

ubuntu

около 3 лет назад

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.

CVE-2022-45685

CVSS3: 7.5

redhat

около 3 лет назад

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.

CVE-2022-45685

CVSS3: 7.5

debian

около 3 лет назад

A stack overflow in Jettison before v1.5.2 allows attackers to cause a ...

GHSA-7rf3-mqpx-h7xg

CVSS3: 7.5

github

около 3 лет назад

Jettison Out-of-bounds Write vulnerability

EPSS

Процентиль: 33%

0.00131

Низкий

7.5 High

CVSS3

Дефекты

CWE-787