Lucene search
+L

76 matches found

Github Security Blog
Github Security Blog
•added 2023/10/12 6:30 p.m.•33 views

Duplicate Advisory: Denial of Service in JSON-Java

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4jq9-2xhw-jpx7. This link is maintained to preserve external references. Original Description Denial of Service in JSON-Java versions prior to 20230618. A bug in the parser means that an input string of modest...

7.5CVSS7.4AI score0.01741EPSS
SaveExploits1References9Affected Software1
osv_ghsa
osv_ghsa
•added 2023/10/12 6:30 p.m.•126 views

GHSA-RM7J-F5G5-27VV Duplicate Advisory: Denial of Service in JSON-Java

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4jq9-2xhw-jpx7. This link is maintained to preserve external references. Original Description Denial of Service in JSON-Java versions prior to 20230618. A bug in the parser means that an input string of modest...

7.5CVSS7.5AI score0.01741EPSS
SaveExploits1References9
osv_debian
osv_debian
•added 2023/10/12 5:15 p.m.•6 views

DEBIAN-CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.2AI score0.01741EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/12 5:15 p.m.•29 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.4AI score0.01741EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/10/12 5:15 p.m.•94 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.7AI score0.01741EPSS
SaveExploits1References4
Prion
Prion
•added 2023/10/12 5:15 p.m.•33 views

Input validation

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

5CVSS7.3AI score0.01741EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
•added 2023/10/12 4:13 p.m.•33 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.6AI score0.01741EPSS
SaveExploits1
osv_cve
osv_cve
•added 2023/10/12 4:13 p.m.•50 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.6AI score0.01741EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2023/10/12 4:13 p.m.•59 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.7AI score0.01741EPSS
SaveExploits1References4
Mend
Mend
•added 2023/10/12 4:13 p.m.•5 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

8.7CVSS0.01741EPSS
SaveExploits1References11
Vulnrichment
Vulnrichment
•added 2023/10/12 4:13 p.m.•28 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.6AI score0.01741EPSS
SaveExploits1References4
CVE
CVE
•added 2023/10/12 4:13 p.m.•726 views

CVE-2023-5072

CVE-2023-5072 relates to a Denial of Service in JSON-Java (org.json: JSON-Java) where the parser can exhaust memory on inputs of modest size in versions up to 20230618. Connected sources corroborate a DoS caused by a parser bug in JSON-Java, affecting multiple products that bundle this library. T...

7.5CVSS7.5AI score0.01741EPSS
SaveExploits1References4Affected Software1
Debian CVE
Debian CVE
•added 2023/10/12 4:13 p.m.•61 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS5.9AI score0.01741EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•3 views

CVE-2023-5072: Allocation of Resources Without Limits or Throttling

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7AI score0.01741EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/10/12 12:00 a.m.•13 views

PT-2023-31622

Name of the Vulnerable Software and Affected Versions JSON-Java versions up to and including 20230618 Bitbucket Data Center and Server versions 7.17.0, 7.21.15, 8.9.4, 8.13.0, 8.14.0, and 8.15.0 Confluence Data Center and Server version 3.0 Bamboo Data Center and Server versions 8.1.0, 8.2.0,...

7.5CVSS6.5AI score0.01741EPSS
SaveExploits1References40
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•9 views

JSON-Java Security Vulnerabilities

JSON-Java is a program package from Sean Leary Individual Developer. A security vulnerability exists in JSON-Java 20230618 and earlier versions, which stems from an error in the parser that means that a moderately sized input string could result in unlimited memory usage...

7.5CVSS5.1AI score0.01741EPSS
SaveExploits1References17
OSS-Fuzz
OSS-Fuzz
•added 2023/08/08 7:30 p.m.•16 views

json-java:JsonJavaFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=4809375553552384 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Security exception Crash Address: Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2023/06/22 10:40 p.m.•20 views

json-java:JsonJavaFuzzer: Security exception in org.json.JSONObject.writeValue

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=4541194198974464 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Security exception Crash Address: Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/09/23 4:56 p.m.•17 views

json-java:JsonJavaFuzzer: Security exception in org.json.JSONArray.write

Detailed Report: https://oss-fuzz.com/testcase?key=4696149168095232 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.json.JSONArray.write...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/03/10 5:47 p.m.•10 views

json-java:JsonJavaFuzzer: Uncaught exception in java.base/java.util.Arrays.copyOfRange

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6529506154774528 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

5.9AI score
SaveExploits0
Rows per page
Query Builder