Lucene search

VulnCheckCVE-2024-23684

HistoryJan 19, 2024 - 9:15 p.m.

CVE-2024-23684

2024-01-1921:15:10

CWE-407

VulnCheck

web.nvd.nist.gov

140

cve-2024-23684

decodefrombytes

java

concise binary object representation

cbor

denial of service

security vulnerability

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.1%

JSON

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application’s use of this library, this may be a remote attacker.

Affected configurations

Nvd

Node

peteroupccborRange4.0.0–4.5.1.net

VendorProductVersionCPE
peteroupccbor*cpe:2.3:a:peteroupc:cbor:*:*:*:*:*:.net:*:*

Vendor	Product	Version	CPE
peteroupc	cbor	*	cpe:2.3:a:peteroupc:cbor::::::.net::*

CNA Affected

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "com.upokecenter:cbor",
    "versions": [
      {
        "lessThan": "4.5.1",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "maven"
      }
    ]
  }
]

References

github.com/advisories/GHSA-fj2w-wfgv-mwq6

github.com/peteroupc/CBOR-Java/security/advisories/GHSA-fj2w-wfgv-mwq6

vulncheck.com/advisories/vc-advisory-GHSA-fj2w-wfgv-mwq6

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

42.1%

JSON

Related for CVE-2024-23684