Out of bounds read in json-smart

🗓️ 10 Feb 2022 22:46:22Reported by GitHub Advisory DatabaseType

Out of bounds read vulnerability in JSON Smar

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netplex JSON Smart affect watsonx.data	25 Sep 202419:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application suite Visual Inspection Component back ported version 8.9.x uses components that are vulnerable to CVE-2021-31684, CVE-2023-1370, CVEID: CVE-2023-52428, CVE-2024-7254,CVE-2024-27268.	9 Mar 202607:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	2 Aug 202515:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	26 Feb 202419:46	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 Jan 202414:39	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.	31 Jul 202411:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	29 Jan 202512:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with json-smart-v2 is vulnerable to a denial of service	5 Oct 202320:19	–	ibm
AstraLinux	Astra Linux - уязвимость в json-smart	20 May 202605:53	–	astralinux
Chainguard	CVE-2021-31684 vulnerabilities	1 Jun 202120:15	–	cgr

Vulners

Node

net.minidev json-smartRange2.4.0–2.4.4maven

net.minidev json-smartRange1.3.0–1.3.3maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-31684
github	www.github.com/netplex/json-smart-v1/issues/10
github	www.github.com/netplex/json-smart-v2/issues/67
github	www.github.com/netplex/json-smart-v1/pull/11
github	www.github.com/netplex/json-smart-v2/pull/68
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.debian.org/debian-lts-announce/2023/03/msg00030.html
security	www.security.netapp.com/advisory/ntap-20240621-0006
github	www.github.com/advisories/GHSA-fg2v-w576-w4v3

21 Jun 2024 21:33Current

4Medium risk

Vulners AI Score4

CVSS 25

CVSS 3.17.5

EPSS0.00108

SSVC