CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

CVE-2024-23684 upokecenter CBOR Denial of Service

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation CBOR versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...

ch.admin.bag.covidcertificate:sdk-core (>=1.1.0-dev-3 <=3.3.0-dev-54), com.augustcellars.cose:cose-java (>=1.0.0 <=1.1.0) +28 more potentially affected by CVE-2024-23684 via com.upokecenter:cbor (>=4.0.0 <=4.5)

com.upokecenter:cbor MAVEN version =4.0.0, =1.1.0-dev-3, =1.0.0, =1.2.0, =1.2.0, =1.5.0, =1.5.0, =1.5.0, =6.3.0-RC3, =6.3.0-RC3, =6.3.0-RC3, =1.7.1, =2.3.1, =2.4.0, =3.2.0 and more Source cves: CVE-2024-23684 Source advisory: OSV:GHSA-FJ2W-WFGV-MWQ6...