Lucene search

K
redosRedosROS-20240815-12
HistoryAug 15, 2024 - 12:00 a.m.

ROS-20240815-12

2024-08-1500:00:00
redos.red-soft.ru
2
json
aeson library
vulnerability
remote attacker
denial of service
hash collision
unordered-containers

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

The JSON aeson analysis and encoding library vulnerability is related to the creation of a hash collision in the
unordered-containers base library by sending specially crafted JSON data. Exploitation of the
of the vulnerability could allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64ghc-aeson< 2.1.0.0-2UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High