Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-31684

Опубликовано: 01 июн. 2021
Источник: redhat
CVSS3: 7.5
EPSS Низкий

Описание

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

A flaw was found in the json-smart package in the JSONParserByteArray. This flaw allows an attacker to cause a denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
A-MQ Clients 2json-smartNot affected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/elasticsearch6-rhel8Not affected
Red Hat AMQ Broker 7json-smartNot affected
Red Hat build of Debezium 1json-smartNot affected
Red Hat build of Quarkusjson-smartAffected
Red Hat Data Grid 8json-smartNot affected
Red Hat Decision Manager 7json-smartOut of support scope
Red Hat Integration Camel K 1json-smartNot affected
Red Hat Integration Camel Quarkus 1json-smartNot affected
Red Hat Integration Data Virtualisation Operatorjson-smartOut of support scope

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2102695json-smart: Denial of Service in JSONParserByteArray function

EPSS

Процентиль: 31%
0.00117
Низкий

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 4 лет назад

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

CVSS3: 7.5
nvd
больше 4 лет назад

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

CVSS3: 7.5
debian
больше 4 лет назад

A vulnerability was discovered in the indexOf function of JSONParserBy ...

CVSS3: 7.5
github
почти 4 года назад

Out of bounds read in json-smart

CVSS3: 7.5
fstec
почти 5 лет назад

Уязвимость функции indexOf() класса JSONParserByteArray библиотеки JSON Smart, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 31%
0.00117
Низкий

7.5 High

CVSS3