Lucene search
GoogleCVE-2023-5072HistoryOct 12, 2023 - 5:15 p.m.
CVE-2023-5072
2023-10-1217:15:10
CWE-770
Google
web.nvd.nist.gov
300
cve-2023-5072
denial of service
json-java
nvd
security advisory
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
27.6%
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.
Affected configurations
Node
json-java_projectjson-javaRange≤20230618
| Vendor | Product | Version | CPE |
|---|---|---|---|
| json-java_project | json-java | * | cpe:2.3:a:json-java_project:json-java:*:*:*:*:*:*:*:* |
Related
prion
prion
Input validation
2023-10-12 17:15:00
osv
osv
Java: DoS Vulnerability in JSON-JAVA
2023-11-14 22:24:08
CVE-2023-5072
2023-10-12 17:15:10
CGA-7g9h-xgv7-r8j3
2024-06-06 12:24:57
atlassian
atlassian
cvelist
cvelist
CVE-2023-5072 DoS Vulnerability in JSON-Java
2023-10-12 16:13:27
github
github
Java: DoS Vulnerability in JSON-JAVA
2023-11-14 22:24:08
ibm
ibm
redhatcve
redhatcve
CVE-2023-5072
2023-10-26 18:27:08
ubuntucve
ubuntucve
CVE-2023-5072
2023-10-12 00:00:00
alpinelinux
alpinelinux
CVE-2023-5072
2023-10-12 17:15:10
nessus
nessus
Atlassian Confluence < 7.19.19 / < 8.5.6 / < 8.8.0 (CONFSERVER-94236)
2024-02-27 00:00:00
Oracle Primavera Gateway (April 2024 CPU)
2024-04-18 00:00:00
veracode
veracode
Denial Of Service
2023-10-13 05:14:00
nvd
nvd
CVE-2023-5072
2023-10-12 17:15:10
debiancve
debiancve
CVE-2023-5072
2023-10-12 17:15:10
redhat
redhat
redos
redos
ROS-20240425-08
2024-04-25 00:00:00
cgr
cgr
CVE-2023-5072 vulnerabilities
2024-05-19 03:07:16
kaspersky
kaspersky
KLA63108 Multiple vulnerabilities in Oracle Java SE and GraalVM
2024-01-16 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
27.6%
Related for CVE-2023-5072