Lucene search
+L

10 matches found

osv_hsec
osv_hsec
•added 2025/11/14 2:45 p.m.•61 views

HSEC-2023-0001 Hash flooding vulnerability in aeson

Hash flooding vulnerability in aeson aeson was vulnerable to hash flooding a.k.a. hash DoS. The issue is a consequence of the HashMap implementation from unordered-containers. It results in a denial of service through CPU consumption. This technique has been used in real-world attacks against a...

6.5CVSS6.7AI score0.00833EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-3433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying...

6.5CVSS6.5AI score0.00833EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2024/08/27 12:00 a.m.•21 views

JSON aeson analysis DoS

The vulnerability of the JSONeson analysis and encoding library is related to the creation of a collision in the basic unordered-containers library, by sending specially created JSON data. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

6.8CVSS6.9AI score0.00833EPSS
SaveExploits1References3Affected Software2
Redos
Redos
•added 2024/08/15 12:00 a.m.•38 views

ROS-20240815-12

The JSON aeson analysis and encoding library vulnerability is related to the creation of a hash collision in the unordered-containers base library by sending specially crafted JSON data. Exploitation of the of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.5CVSS6.7AI score0.00833EPSS
SaveExploits1
osv_debian
osv_debian
•added 2022/10/10 10:15 p.m.•22 views

DEBIAN-CVE-2022-3433

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...

6.5CVSS6.8AI score0.00833EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/10/10 10:15 p.m.•12 views

CVE-2022-3433

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...

6.5CVSS6.7AI score0.00833EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/10/10 10:15 p.m.•34 views

UBUNTU-CVE-2022-3433

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...

6.5CVSS5.8AI score0.00833EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/10/10 12:00 a.m.•17 views

PT-2022-7465

Name of the Vulnerable Software and Affected Versions aeson affected versions not specified Description The aeson library is not safe for consuming untrusted JSON input. A remote user could exploit this issue to produce a hash collision in the underlying unordered-containers library by sending...

8.5CVSS7.6AI score0.02053EPSS
SaveExploits2References40
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/10 12:00 a.m.•8 views

CVE-2022-3433: Use of Weak Hash

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...

6.5CVSS6.6AI score0.00833EPSS
SaveExploits1References3
Mend
Mend
•added 2022/10/10 12:00 a.m.•7 views

CVE-2022-3433

The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...

7.1CVSS0.00833EPSS
SaveExploits1References4
Rows per page
Query Builder