CVE-2024-23684 upokecenter CBOR Denial of Service

2024-01-1920:59:02

CWE-407

VulnCheck

www.cve.org

cve-2024-23684

upokecenter

cbor

denial of service

java

inefficient algorithmic complexity

concise binary object representation

remote attacker

EPSS

0.001

Percentile

42.1%

JSON

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application’s use of this library, this may be a remote attacker.

CNA Affected

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "com.upokecenter:cbor",
    "versions": [
      {
        "lessThan": "4.5.1",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "maven"
      }
    ]
  }
]