GHSA-Q6G2-G7F3-RR83 Jettison vulnerable to infinite recursion

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

Jettison vulnerable to infinite recursion

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

Design/Logic Flaw

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

CVE-2023-1436 Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

CVE-2023-1436

CVE-2023-1436 : Jettison triggers an infinite recursion when constructing a JSONArray from a Collection containing a self-reference, leading to a DoS/StackOverflow in vulnerable deployments. Connected IBM advisories tie this to IBM watsonx.data and list remediation: upgrade to watsonx.data 2.0.3 ...

CVE-2023-1436 Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

CVE-2023-1436

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown...

PT-2023-7074

Name of the Vulnerable Software and Affected Versions Jettison affected versions not specified Description The issue is related to an infinite recursion triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a...

json-java:JsonJavaFuzzer: Security exception in org.json.JSONArray.write

Detailed Report: https://oss-fuzz.com/testcase?key=4696149168095232 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Security exception Crash Address: Crash State: org.json.JSONArray.write...

jettison:JsonFuzzer: Security exception in org.codehaus.jettison.json.JSONTokener.newJSONObject

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=6634592873873408 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Security exception Crash Address: Crash...

fastjson2:JsonFuzzer: Uncaught exception in java.base/java.util.ArrayList.hashCodeRange

Detailed Report: https://oss-fuzz.com/testcase?key=4802318213709824 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.util.ArrayList.hashCodeRange...

jettison:JsonFuzzer: Uncaught exception in org.codehaus.jettison.json.JSONTokener.nextValue

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=4631149705560064 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

json-java:JsonJavaFuzzer: Uncaught exception in org.json.JSONArray.<init>

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=5564531707871232 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

json-java:JsonJavaFuzzer: Uncaught exception in org.json.JSONTokener.nextValue

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=4779713038516224 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

Detailed Report: https://oss-fuzz.com/testcase?key=5823969121927168 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.deepScan...

fastjson2:JsonFuzzer: Uncaught exception in java.base/java.util.ArrayList.<init>

Detailed Report: https://oss-fuzz.com/testcase?key=5788880614850560 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.util.ArrayList...

fastjson2:JsonFuzzer: Uncaught exception in java.base/java.util.ArrayList.hashCodeRange

Detailed Report: https://oss-fuzz.com/testcase?key=4996067627237376 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: java.base/java.util.ArrayList.hashCodeRange...