Lucene search
GoogleOSV:CVE-2018-18854HistoryOct 31, 2018 - 5:29 a.m.
CVE-2018-18854
2018-10-3105:29:00
Google
osv.dev
9
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).
| CPE | Name | Operator | Version |
|---|---|---|---|
| spray-json | eq | 1.1.0 | |
| spray-json | eq | 1.2.2 | |
| spray-json | eq | 1.3.0 | |
| spray-json | eq | 1.3.2 | |
| spray-json | eq | 1.3.2-2.12 | |
| spray-json | eq | 1.1.1 | |
| spray-json | eq | 1.2.6 | |
| spray-json | eq | 1.2.3 | |
| spray-json | eq | 1.3.4 | |
| spray-json | eq | 1.0.1 |
References
Related
cve
cve
CVE-2018-18854
2018-10-31 05:29:00
osv
osv
Uncontrolled Resource Consumption in spray-json
2018-11-09 17:41:35
prion
prion
Code injection
2018-10-31 05:29:00
cvelist
cvelist
CVE-2018-18854
2018-10-31 05:00:00
nvd
nvd
CVE-2018-18854
2018-10-31 05:29:00
github
github
Uncontrolled Resource Consumption in spray-json
2018-11-09 17:41:35
veracode
veracode
Denial Of Service (DoS)
2018-11-01 05:34:53
