Lucene search

CVE-2022-40149

🗓️ 18 Oct 2022 11:53:39Reported by redhat.comType

Stack-based buffer overflow in Jettison parse

Reporter	Title	Published	Views	Family All 82
Github Security Blog	Jettison parser crash by stackoverflow	17 Sep 202200:00	–	github
Github Security Blog	Jettison parser crash by stackoverflow	1 Aug 202319:53	–	github
Debian	[SECURITY] [DLA 3184-1] libjettison-java security update	10 Nov 202211:04	–	debian
Debian	[SECURITY] [DSA 5312-1] libjettison-java security update	10 Jan 202323:10	–	debian
Amazon	Medium: jettison	29 Nov 202322:20	–	amazon
UbuntuCve	CVE-2022-40149	16 Sep 202200:00	–	ubuntucve
Veracode	Denial Of Service (DoS)	19 Sep 202212:01	–	veracode
Tenable Nessus	Amazon Linux 2 : jettison (ALAS-2023-2363)	4 Dec 202300:00	–	nessus
Tenable Nessus	Debian DLA-3184-1 : libjettison-java - LTS security update	12 Nov 202200:00	–	nessus
Tenable Nessus	Oracle Access Manager Multiple Vulnerabilities (Apr 2023 CPU)	19 Apr 202300:00	–	nessus

Vulners

Node

redhat jenkins-2-plugins-0Range≤4.12.1686649756-1.el8

redhat jenkins-2-plugins-0Range≤4.11.1686831822-1.el8

redhat eap7-jettison-0Range≤1.5.2-1.redhat_00002.1.el8eap

redhat eap7-jettison-0Range≤1.5.2-1.redhat_00002.1.el9eap

redhat eap7-jettison-0Range≤1.5.2-1.redhat_00002.1.el7eap

redhat rh-sso7-keycloak-0Range≤18.0.6-1.redhat_00001.1.el7sso

redhat rh-sso7-keycloak-0Range≤18.0.6-1.redhat_00001.1.el8sso

redhat rh-sso7-keycloak-0Range≤18.0.6-1.redhat_00001.1.el9sso

redhat rh-sso-7\/sso76-openshift-rhel8Range≤7.6-20

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-40149
github	www.github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 Oct 2022 11:39Current

4.8Medium risk

Vulners AI Score4.8

CVSS37.5

EPSS0.002

CWE-121->CWE-787