CVE-2023-52070

2024-04-1019:15:48

Debian Security Bug Tracker

security-tracker.debian.org

jfreechart v1.5.4

arrayindexoutofbounds

setseriesneedle

vulnerabilityidentification

dispute

thirdparties

robustness

vulnerability

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.8%

JSON

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the ‘setSeriesNeedle(int index, int type)’ method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

OSVersionArchitecturePackageVersionFilename
Debian12alllibjfreechart-java<= 1.0.19-3libjfreechart-java_1.0.19-3_all.deb
Debian11alllibjfreechart-java<= 1.0.19-3libjfreechart-java_1.0.19-3_all.deb
Debian10alllibjfreechart-java<= 1.0.19-2libjfreechart-java_1.0.19-2_all.deb
Debian999alllibjfreechart-java<= 1.0.19-3libjfreechart-java_1.0.19-3_all.deb
Debian13alllibjfreechart-java<= 1.0.19-3libjfreechart-java_1.0.19-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libjfreechart-java	<= 1.0.19-3	libjfreechart-java_1.0.19-3_all.deb
Debian	11	all	libjfreechart-java	<= 1.0.19-3	libjfreechart-java_1.0.19-3_all.deb
Debian	10	all	libjfreechart-java	<= 1.0.19-2	libjfreechart-java_1.0.19-2_all.deb
Debian	999	all	libjfreechart-java	<= 1.0.19-3	libjfreechart-java_1.0.19-3_all.deb
Debian	13	all	libjfreechart-java	<= 1.0.19-3	libjfreechart-java_1.0.19-3_all.deb