CVE-2023-46442

An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service DoS...

com.jordansamhi:androspecter (>=0.1 <=1.0.3), com.jordansamhi:coal (>=0.2 <=0.2.1) +25 more potentially affected by CVE-2023-46442 via org.soot-oss:soot (>=4.2.1 <=4.3.0)

org.soot-oss:soot MAVEN version =4.2.1, =0.1, =0.2, =0.1, =2.7.2, =2.8.0, =2.5.1, =3.1.2, =3.1.2, =2.5.1, =2.5.1, =3.1.2-Sparse - de.fraunhofer.sit.sse.flowdroid:soot-infoflow =2.10.0 - de.fraunhofer.sit.sse.flowdroid:soot-infoflow-android =2.10.0 and more Source cves: CVE-2023-46442 Source...

CVE-2023-46442

An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service DoS...

CVE-2023-46442

An infinite loop in the retrieveActiveBody function of Soot before v4.4.1 under Java 8 allows attackers to cause a Denial of Service DoS...

CVE-2023-46442

CVE-2023-46442 affects the Soot framework (Java 8) where an infinite loop in retrieveActiveBody can cause DoS. Public details confirm vulnerable versions prior to 4.4.1 and an exploit/POC exists demonstrating resource exhaustion. Remediation per sources is to upgrade to Soot 4.4.1 or later; as a ...

Exploit for CVE-2023-46442

CVE-2023-46442POC Environment: Java 8 POC for CVE-2023-46...