Lucene search
K

59 matches found

NVD
NVD
added 2023/10/12 5:15 p.m.13 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.4AI score0.00677EPSS
Exploits1References4
OSV
OSV
added 2023/10/12 5:15 p.m.1 views

DEBIAN-CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.2AI score0.00677EPSS
Exploits1References1
OSV
OSV
added 2023/10/12 5:15 p.m.35 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.2AI score
Exploits0References4
UbuntuCve
UbuntuCve
added 2023/10/12 5:15 p.m.82 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.7AI score0.00677EPSS
Exploits1References4
Prion
Prion
added 2023/10/12 5:15 p.m.22 views

Input validation

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

5CVSS7.3AI score0.00677EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/12 4:13 p.m.21 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.6AI score0.00677EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/10/12 4:13 p.m.25 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.7AI score0.00677EPSS
Exploits1References4
CVE
CVE
added 2023/10/12 4:13 p.m.637 views

CVE-2023-5072

CVE-2023-5072 relates to a Denial of Service in JSON-Java (org.json: JSON-Java) where the parser can exhaust memory on inputs of modest size in versions up to 20230618. Connected sources corroborate a DoS caused by a parser bug in JSON-Java, affecting multiple products that bundle this library. T...

7.5CVSS7.5AI score0.00677EPSS
Exploits1References4Affected Software1
Debian CVE
Debian CVE
added 2023/10/12 4:13 p.m.29 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS5.9AI score0.00677EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2023/10/12 4:13 p.m.24 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.6AI score0.00677EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2023/10/12 12:0 a.m.1 views

PT-2023-31622

Name of the Vulnerable Software and Affected Versions JSON-Java versions up to and including 20230618 Bitbucket Data Center and Server versions 7.17.0, 7.21.15, 8.9.4, 8.13.0, 8.14.0, and 8.15.0 Confluence Data Center and Server version 3.0 Bamboo Data Center and Server versions 8.1.0, 8.2.0,...

7.5CVSS6.5AI score0.00677EPSS
Exploits1References43
CNNVD
CNNVD
added 2023/10/12 12:0 a.m.1 views

JSON-Java Security Vulnerabilities

JSON-Java is a program package from Sean Leary Individual Developer. A security vulnerability exists in JSON-Java 20230618 and earlier versions, which stems from an error in the parser that means that a moderately sized input string could result in unlimited memory usage...

7.5CVSS5.1AI score0.00677EPSS
Exploits1References17
OpenVAS
OpenVAS
added 2021/02/19 12:0 a.m.26 views

Ubuntu: Security Advisory (USN-4741-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.82379EPSS
Exploits7References2
Ubuntu
Ubuntu
added 2021/02/18 8:36 p.m.127 views

USN-4741-1: Jackson vulnerabilities

It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code...

9.8CVSS7.2AI score0.82379EPSS
Exploits7
OpenVAS
OpenVAS
added 2020/08/25 12:0 a.m.34 views

Debian: Security Advisory (DLA-2342-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.9AI score0.82379EPSS
Exploits7References4
Debian
Debian
added 2020/08/24 9:26 a.m.53 views

[SECURITY] [DLA 2342-1] libjackson-json-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2342-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

9.8CVSS9.4AI score0.82379EPSS
Exploits7
OpenVAS
OpenVAS
added 2020/02/01 12:0 a.m.87 views

Debian: Security Advisory (DLA-2091-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.2AI score0.82379EPSS
Exploits7References3
Debian
Debian
added 2020/01/31 9:51 p.m.158 views

[SECURITY] [DLA 2091-1] libjackson-json-java security update

Package : libjackson-json-java Version : 1.9.2-3+deb8u1 CVE ID : CVE-2017-7525 CVE-2017-15095 CVE-2019-10172 Several vulnerabilities were fixed in libjackson-json-java. CVE-2017-7525 Jackson Deserializer security vulnerability. CVE-2017-15095 Block more JDK types from polymorphic deserialization...

9.8CVSS9.4AI score0.82379EPSS
Exploits7
OSV
OSV
added 2020/01/31 12:0 a.m.58 views

DLA-2091-1 libjackson-json-java - security update

Bulletin has no description...

9.8CVSS9AI score0.82379EPSS
Exploits7
Rows per page
Query Builder