CVE-2024-47855 vulnerabilities

Vulnerabilities for packages: jenkins...

Linux Distros Unpatched Vulnerability : CVE-2024-47855

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string. CVE-2024-47855 Note that Nessus relies on the presence of the package as...

jenkins -- Denial of service vulnerability in bundled json-lib

Jenkins Security Advisory: Description High SECURITY-3463 / CVE-2024-47855 Denial of service vulnerability in bundled json-lib...

openSUSE Security Advisory (SUSE-SU-2024:3543-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:3543-1 Security update for json-lib

This update for json-lib fixes the following issues: - CVE-2024-47855: Fixed mishandled unbalanced comment string bsc1231295...

SUSE CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

com.testingbot:testingbottunnel (>=1.0, <=1.7), testingbot:testingbot (>=1.4, <=1.5) potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (1.0)

net.sf.json-lib:json-lib MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - com.testingbot:testingbottunnel =1.0, =1.4, =1.5 Source cves: CVE-2024-47855 Source advisory:...

com.njdys:ddpapi (>=1.0, <=1.3), net.sourceforge.openutils:openutils-spring (1.0.4) potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (1.1)

net.sf.json-lib:json-lib MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - com.njdys:ddpapi =1.0, =1.3 - net.sourceforge.openutils:openutils-spring 1.0.4 Source cves: CVE-2024-47855 Source...

ai.mattmann.mnemosyne:pcs-services (>=1.11.0, <=1.13.8), ar.com.jmfsg:api-doc (>=0.0.20, <=0.0.34) +2248 more potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (>=2.0, <=2.4)

net.sf.json-lib:json-lib MAVEN version =2.0, =1.11.0, =0.0.20, =2.1.1, =2.4.2, =2.4.2, =3.5.4-rc.1, =2.4.2, =2.4.2, =3.5.4-rc.1, =2.4.2, =2.4.2, =3.5.4-rc.1, =2.4.2, =2.4.2, =3.5.4-rc.1, =3.5.7 and more Source cves: CVE-2024-47855 Source advisory: GHSA-WWCP-26WC-3FXM...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

The Java library JSON-lib is vulnerable due to improper syntax validation in util/JSONTokener.java before version 3.1.0 . The component mishandles an unbalanced comment string, which can be exploited remotely to trigger service failures or a Denial of Service (DoS) condition. This issue affects v...