Lucene search

Jettison parser crash by stackoverflow

🗓️ 01 Aug 2023 19:16:53Reported by GitHub Advisory DatabaseType

Jettison parser vulnerability to DoS attacks

Reporter	Title	Published	Views	Family All 82
Github Security Blog	Jettison parser crash by stackoverflow	17 Sep 202200:00	–	github
Debian	[SECURITY] [DLA 3184-1] libjettison-java security update	10 Nov 202211:04	–	debian
Debian	[SECURITY] [DSA 5312-1] libjettison-java security update	10 Jan 202323:10	–	debian
Veracode	Denial Of Service (DoS)	19 Sep 202212:01	–	veracode
UbuntuCve	CVE-2022-40149	16 Sep 202200:00	–	ubuntucve
OSV	Jettison parser crash by stackoverflow	17 Sep 202200:00	–	osv
OSV	CVE-2022-40149	16 Sep 202210:15	–	osv
OSV	libjettison-java - security update	10 Nov 202200:00	–	osv
OSV	Jettison parser crash by stackoverflow	1 Aug 202319:53	–	osv
OSV	jettison-1.5.1-1.1 on GA media	15 Jun 202400:00	–	osv

Vulners

Node

com.tencyle.fixes org.codehaus.jettison--jettisonMatch1.1-tencyle-2.1.0

Source	Link
github	www.github.com/tencyle-fixes/jettison/security/advisories/GHSA-xqcq-j8w9-3pxv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-40149
github	www.github.com/jettison-json/jettison/issues/45
github	www.github.com/jettison-json/jettison/pull/49
bugs	www.bugs.chromium.org/p/oss-fuzz/issues/detail
github	www.github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
github	www.github.com/tencyle-fixes/jettison
lists	www.lists.debian.org/debian-lts-announce/2022/11/msg00011.html
debian	www.debian.org/security/2023/dsa-5312
github	www.github.com/advisories/GHSA-xqcq-j8w9-3pxv

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Aug 2023 19:53Current

8.3High risk

Vulners AI Score8.3

EPSS0.005