3 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-33546
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Janino 3.1.9 and earlier are subject to denial of service DOS attacks when using the expression evaluator.guess parameter name method. If the parser runs on...
CVE-2023-33546
Janino 3.1.9 and earlier are subject to denial of service DOS attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by...
PT-2022-36738 · Oracle · Java
Name of the Vulnerable Software and Affected Versions: java versions affected versions not specified Description: A security exception occurs due to a crash in the org.codehaus.janino.Parser.parseAssignmentExpression function, which is related to the java.base/sun.nio.cs.CESU 8$Encoder.encodeLoop...