Lucene search

K
githubGitHub Advisory DatabaseGHSA-2268-98WH-QFHF
HistoryDec 29, 2023 - 3:30 p.m.

JLine vulnerable to out of memory error

2023-12-2915:30:37
CWE-122
CWE-787
GitHub Advisory Database
github.com
5
jline
groovyengine
oom
exception
vulnerability
software

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

12.7%

An issue in the component GroovyEngine.execute of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.

Affected configurations

Vulners
Node
org.jline\jlineMatchparent

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7

Confidence

High

EPSS

0

Percentile

12.7%