Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.

Summary Netcool Operations Insight v1.6.13 addresses multiple security vulnerabilities, listed in the CVEs below. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2021-31684 DESCRIPTION: netplex JSON Smart is vulnerable to a denial of...

Atlassian Confluence < 7.19.17 / 7.20.x < 8.3.4 / 8.4.x < 8.4.5 / 8.5.x < 8.5.4 / 8.6.x < 8.6.2 / 8.7.x < 8.7.1 (CONFSERVER-93361)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-93361 advisory. - A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service...

Security Bulletin: IBM Spectrum Symphony with json-smart-v2 is vulnerable to a denial of service

Summary IBM Spectrum Symphony with json-smart-v2 is vulnerable to a denial of service Vulnerability Details CVEID:CVE-2023-1370 DESCRIPTION: netplex json-smart-v2 is vulnerable to a denial of service, caused by not limiting the nesting of arrays or objects. By sending a specially crafted input, a...

K000134680: JSON Smart vulnerability CVE-2021-31684

Security Advisory Description A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request. CVE-2021-31684 Impact There is no impact; F5 products are not affected by this...

Ubuntu: Security Advisory (USN-6011-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Json-smart vulnerabilities (USN-6011-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6011-1 advisory. It was discovered that Json-smart incorrectly handled memory when processing input containing unclosed quotes. A remote attacker...

[SECURITY] [DLA 3373-1] json-smart security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3373-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès March 30, 2023 https://wiki.debian.org/LTS -...

Debian dla-3373 : libjson-smart-java - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3373 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3373-1 [email protected]...

CVE-2021-31684

A flaw was found in the json-smart package in the JSONParserByteArray. This flaw allows an attacker to cause a denial of service...

ai.tripl:arc-jupyter_2.11 (>=0.0.13 <=0.0.14), ai.tripl:arc_2.11 (>=1.13.3 <=1.15.0) +728 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=1.3.1 <=1.3.2)

net.minidev:json-smart MAVEN version =1.3.1, =0.0.13, =1.13.3, =5.1.15, =5.1.17.50-beta - com.aliyun.hbase:alihbase-assembly =2.0.2 - com.aliyun.hbase:alihbase-endpoint =2.0.2 - com.aliyun.hbase:alihbase-examples =2.0.2 - com.aliyun.hbase:alihbase-external-blockcache =2.0.2 -...

ai.apiverse:apipulse (=1.0.1), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6 <=1.2.10) +4521 more potentially affected by CVE-2021-31684 via net.minidev:json-smart (>=2.4.1 <=2.4.2)

net.minidev:json-smart MAVEN version =2.4.1, =1.0.6, =1.0.6, =0.13.0, =0.26.0, =0.26.0, =0.0.10, =0.0.6, =0.2.7, =0.2.7, =0.6.1.2, =0.6.6 - au.net.causal.shoelaces:shoelaces-selenium =3.0 - au.net.causal.shoelaces:shoelaces-testing =3.0 and more Source cves: CVE-2021-31684 Source advisory:...

CVE-2021-31684 vulnerabilities

Vulnerabilities for packages: druid, thingsboard, celeborn...

CVE-2021-31684 vulnerabilities

Vulnerabilities for packages: druid, hadoop-client-modules, thingsboard, celeborn...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

JSON Smart contains a denial-of-service vulnerability in the indexOf function of JSONParserByteArray, affecting versions 1.3 and 2.4. A crafted web request can trigger the issue. Public advisories note fixes in later releases (e.g., 1.3.3/2.4.5 and vendor-specific patches such as Debian 2.2-2+deb...