Stack Overflow

Ion Java is vulnerable to Stack Overflow. The vulnerability is due to improper validation while deserializing Ion text encoded data, or deserializing Ion text or binary encoded data into an IonValue model. This issue can be exploited by an attacker via crafted malicious Ion data, resulting in...

Design/Logic Flaw

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in ion-java for applications that use ion-java to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the IonValue model and then...

CVE-2024-21634

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in "ion-java" for applications that use "ion-java" to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the "IonValue" model and...

CVE-2024-21634 Ion Java StackOverflow vulnerability

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in ion-java for applications that use ion-java to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the IonValue model and then...

CVE-2024-21634 Ion Java StackOverflow vulnerability

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in ion-java for applications that use ion-java to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the IonValue model and then...

CVE-2024-21634 Ion Java StackOverflow vulnerability

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in ion-java for applications that use ion-java to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the IonValue model and then...

CVE-2024-21634

CVE-2024-21634 is a DoS in Amazon Ion’s Java implementation (ion-java) prior to 1.10.5, triggered when deserializing Ion text/binary data into IonValue and invoking certain IonValue methods, leading to StackOverflowError. The issue is fixed in ion-java 1.10.5. In Jira Software Data Center/Server,...

Ion Java StackOverflow vulnerability

Impact A potential denial-of-service issue exists in ion-java for applications that use ion-java to: Deserialize Ion text encoded data, or Deserialize Ion text or binary encoded data into the IonValue model and then invoke certain IonValue methods on that in-memory representation. An actor could...

GHSA-264P-99WQ-F4J6 Ion Java StackOverflow vulnerability

Impact A potential denial-of-service issue exists in ion-java for applications that use ion-java to: Deserialize Ion text encoded data, or Deserialize Ion text or binary encoded data into the IonValue model and then invoke certain IonValue methods on that in-memory representation. An actor could...

Amazon Ion Security Breach

Amazon Ion is a type-rich, self-describing, hierarchical data serialization format from Amazon Amazon. It provides interchangeable binary and textual representations. A security vulnerability exists in Amazon Ion versions prior to 1.10.5, which stems from a stack overflow in Ion Java that could...

PT-2024-18985

Name of the Vulnerable Software and Affected Versions ion-java versions prior to 1.10.5 Bitbucket Data Center and Server versions 7.21.0 through 8.18.0 Confluence Data Center and Server versions 5.6 through 8.8.1 Jira Software versions affected versions not specified Jira Work Management versions...

CVE-2024-21634: Allocation of Resources Without Limits or Throttling

Amazon Ion is a Java implementation of the Ion data notation. Prior to version 1.10.5, a potential denial-of-service issue exists in ion-java for applications that use ion-java to deserialize Ion text encoded data, or deserialize Ion text or binary encoded data into the IonValue model and then...

ion-java:IonWriterFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Project: https://github.com/amazon-ion/ion-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6709542923403264 Project: ion-java Fuzzing Engine: libFuzzer Fuzz Target: IonWriterFuzzer Job Type: libfuzzerasanion-java Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ion-java:IonReaderFuzzer: Security exception in com.amazon.ion.impl.IonReaderTextRawTokensX.skip_over_container

Project: https://github.com/amazon-ion/ion-java.git Detailed Report: https://oss-fuzz.com/testcase?key=4540582861864960 Project: ion-java Fuzzing Engine: libFuzzer Fuzz Target: IonReaderFuzzer Job Type: libfuzzerasanion-java Platform Id: linux Crash Type: Security exception Crash Address: Crash...