Lucene search
+L

829 matches found

Vulnrichment
Vulnrichment
•added 2022/04/13 6:25 p.m.•10 views

CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

5.3CVSS7.3AI score0.01361EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/04/13 6:25 p.m.•38 views

CVE-2021-41119 DoS vulnerabiliity in wire-server json parser

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

5.3CVSS7.6AI score0.01361EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2022/04/13 6:25 p.m.•57 views

CVE-2021-41119

Removed by vendor...

7.5CVSS7.5AI score0.01361EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/04/13 12:00 a.m.•4 views

PT-2022-11366

Name of the Vulnerable Software and Affected Versions wire-server versions prior to 2022-03-01 Description The issue is a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it, which can lead to a denia...

7.5CVSS5.6AI score0.01361EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/13 12:00 a.m.•8 views

CVE-2021-41119: Uncontrolled Resource Consumption

Wire-server is the system server for the wire back-end services. Releases prior to v2022-03-01 are subject to a denial of service attack via a crafted object causing a hash collision. This collision causes the server to spend at least quadratic time parsing it which can lead to a denial of servic...

7.5CVSS6.9AI score0.01361EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2022/02/21 12:00 a.m.•29 views

Security update for jaw (moderate)

openSUSE Security Update: Security update for jaw Announcement ID: openSUSE-SU-2022:0045-1 Rating: moderate References: 1194358 Cross-References: CVE-2022-21653 CVSS scores: CVE-2022-21653 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP2 An...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/20 1:01 p.m.•4 views

OPENSUSE-SU-2022:0045-1 Security update for jaw

jawn was updated to fix: CVE-2022-21653: DoS caused by a hash collision in SimpleFacade and MutableFacade bsc1194358...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1References3
OSV
OSV
•added 2022/01/18 10:43 a.m.•4 views

OPENSUSE-SU-2022:0106-1 Security update for jawn

This update for jawn fixes the following issues: - CVE-2022-21653: Fixed DoS caused by a hash collision in SimpleFacade and MutableFacade bsc1194358...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2022/01/18 12:00 a.m.•34 views

Security update for jawn (important)

openSUSE Security Update: Security update for jawn Announcement ID: openSUSE-SU-2022:0106-1 Rating: important References: 1194358 Cross-References: CVE-2022-21653 CVSS scores: CVE-2022-21653 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Leap 15.3 An update tha...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/11 1:01 p.m.•8 views

OPENSUSE-SU-2022:0011-1 Security update for jawn

This update for jawn fixes the following issues: CVE-2022-21653: DoS caused by a hash collision in SimpleFacade and MutableFacade boo1194358...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References3
Veracode
Veracode
•added 2022/01/07 5:37 a.m.•29 views

Denial Of Service (DoS)

org.typelevel, jawn-parser is vulnerable to denial of service. The vulnerability exists through org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade which are not override objectContext, its leads to a hash collision attack and system crash...

7.5CVSS2AI score0.00793EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2022/01/06 11:48 p.m.•46 views

Hash collision in typelevel jawn

Impact Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack. Most applications do not implement these traits directly, but inherit from a library: Affected implementations include: org.http...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References4Affected Software18
OSV
OSV
•added 2022/01/06 11:48 p.m.•15 views

GHSA-VC89-HCCF-RQ55 Hash collision in typelevel jawn

Impact Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack. Most applications do not implement these traits directly, but inherit from a library: Affected implementations include: org.http...

5.9CVSS5.9AI score0.00793EPSS
SaveExploits1References4
NVD
NVD
•added 2022/01/05 9:15 p.m.•53 views

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS0.00793EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/05 9:15 p.m.•25 views

Code injection

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

5CVSS7.3AI score0.00793EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/01/05 9:15 p.m.•32 views

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS7.1AI score0.00793EPSS
SaveExploits1References3
OSV
OSV
•added 2022/01/05 9:15 p.m.•12 views

UBUNTU-CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS5.8AI score0.00793EPSS
SaveExploits1References4
Mend
Mend
•added 2022/01/05 9:00 p.m.•2 views

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the "org.typelevel.jawn.SimpleFacade" and "org.typelevel.jawn.MutableFacade" who don't override "objectContext" are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits...

8.2CVSS0.00793EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2022/01/05 9:00 p.m.•7 views

CVE-2022-21653 Hash collision in typelevel jawn

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

5.9CVSS7.4AI score0.00793EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/01/05 9:00 p.m.•61 views

CVE-2022-21653 Hash collision in typelevel jawn

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

5.9CVSS7.6AI score0.00793EPSS
SaveExploits1References2
Rows per page
Query Builder