CVE-2023-5072

Опубликовано: 12 окт. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

Ссылки

http://www.openwall.com/lists/oss-security/2023/12/13/4
https://github.com/stleary/JSON-java/issues/758
Issue Tracking
https://github.com/stleary/JSON-java/issues/771
Exploit
Issue Tracking
https://security.netapp.com/advisory/ntap-20240621-0007/
http://www.openwall.com/lists/oss-security/2023/12/13/4
https://github.com/stleary/JSON-java/issues/758
Issue Tracking
https://github.com/stleary/JSON-java/issues/771
Exploit
Issue Tracking
https://security.netapp.com/advisory/ntap-20240621-0007/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:stleary:json-java:*:*:*:*:*:*:*:*

Версия до 20230618 (включая)

EPSS

Процентиль: 64%

0.00468

Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVE-2023-5072

CVSS3: 7.5

ubuntu

около 2 лет назад

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

CVE-2023-5072

CVSS3: 7.5

redhat

около 2 лет назад

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

CVE-2023-5072

CVSS3: 7.5

debian

около 2 лет назад

Denial of Service in JSON-Java versions up to and including 20230618. ...

ROS-20240425-08

CVSS3: 7.5

redos

больше 1 года назад

Уязвимость OpenSearch

GHSA-4jq9-2xhw-jpx7

CVSS3: 7.5

github

около 2 лет назад

Java: DoS Vulnerability in JSON-JAVA

EPSS

Процентиль: 64%

0.00468

Низкий

7.5 High

CVSS3

Дефекты

CWE-770