Lucene search
+L

61 matches found

Github Security Blog
Github Security Blog
•added 2023/10/12 6:30 p.m.•32 views

Duplicate Advisory: Denial of Service in JSON-Java

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-4jq9-2xhw-jpx7. This link is maintained to preserve external references. Original Description Denial of Service in JSON-Java versions prior to 20230618. A bug in the parser means that an input string of modest...

7.5CVSS7.4AI score0.01449EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2023/10/12 5:15 p.m.•5 views

DEBIAN-CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.2AI score0.01449EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/12 5:15 p.m.•28 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.4AI score0.01449EPSS
SaveExploits1References4
Prion
Prion
•added 2023/10/12 5:15 p.m.•32 views

Input validation

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

5CVSS7.3AI score0.01449EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2023/10/12 5:15 p.m.•92 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.7AI score0.01449EPSS
SaveExploits1References4
CVE
CVE
•added 2023/10/12 4:13 p.m.•716 views

CVE-2023-5072

CVE-2023-5072 relates to a Denial of Service in JSON-Java (org.json: JSON-Java) where the parser can exhaust memory on inputs of modest size in versions up to 20230618. Connected sources corroborate a DoS caused by a parser bug in JSON-Java, affecting multiple products that bundle this library. T...

7.5CVSS7.5AI score0.01449EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2023/10/12 4:13 p.m.•58 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.7AI score0.01449EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2023/10/12 4:13 p.m.•59 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS5.9AI score0.01449EPSS
SaveExploits1
OSV
OSV
•added 2023/10/12 4:13 p.m.•47 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.6AI score
SaveExploits0References6
AlpineLinux
AlpineLinux
•added 2023/10/12 4:13 p.m.•33 views

CVE-2023-5072

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7.6AI score0.01449EPSS
SaveExploits1
Vulnrichment
Vulnrichment
•added 2023/10/12 4:13 p.m.•27 views

CVE-2023-5072 DoS Vulnerability in JSON-Java

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS6.6AI score0.01449EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/10/12 12:00 a.m.•9 views

JSON-Java Security Vulnerabilities

JSON-Java is a program package from Sean Leary Individual Developer. A security vulnerability exists in JSON-Java 20230618 and earlier versions, which stems from an error in the parser that means that a moderately sized input string could result in unlimited memory usage...

7.5CVSS5.1AI score0.01449EPSS
SaveExploits1References17
Positive Technologies
Positive Technologies
•added 2023/10/12 12:00 a.m.•9 views

PT-2023-31622

Name of the Vulnerable Software and Affected Versions JSON-Java versions up to and including 20230618 Bitbucket Data Center and Server versions 7.17.0, 7.21.15, 8.9.4, 8.13.0, 8.14.0, and 8.15.0 Confluence Data Center and Server version 3.0 Bamboo Data Center and Server versions 8.1.0, 8.2.0,...

7.5CVSS6.5AI score0.01449EPSS
SaveExploits1References38
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/12 12:00 a.m.•1 views

CVE-2023-5072: Allocation of Resources Without Limits or Throttling

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used...

7.5CVSS7AI score0.01449EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2021/02/19 12:00 a.m.•90 views

Ubuntu: Security Advisory (USN-4741-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7References2
Ubuntu
Ubuntu
•added 2021/02/18 8:36 p.m.•141 views

USN-4741-1: Jackson vulnerabilities

It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7
OpenVAS
OpenVAS
•added 2020/08/25 12:00 a.m.•56 views

Debian: Security Advisory (DLA-2342-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7References4
Debian
Debian
•added 2020/08/24 9:26 a.m.•131 views

[SECURITY] [DLA 2342-1] libjackson-json-java security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2342-1 [email protected] https://www.debian.org/lts/security/ August 24, 2020 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- Package...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7
OpenVAS
OpenVAS
•added 2020/02/01 12:00 a.m.•158 views

Debian: Security Advisory (DLA-2091-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7References3
Debian
Debian
•added 2020/01/31 9:51 p.m.•220 views

[SECURITY] [DLA 2091-1] libjackson-json-java security update

Package : libjackson-json-java Version : 1.9.2-3+deb8u1 CVE ID : CVE-2017-7525 CVE-2017-15095 CVE-2019-10172 Several vulnerabilities were fixed in libjackson-json-java. CVE-2017-7525 Jackson Deserializer security vulnerability. CVE-2017-15095 Block more JDK types from polymorphic deserialization...

9.8CVSS6.8AI score0.37721EPSS
SaveExploits7
Rows per page
Query Builder