Denial Of Service (DoS)

🗓️ 02 Jun 2021 03:40:39Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

json-smart ArrayIndexOutOfBoundsException vulnerabilit

Reporter	Title	Published	Views	Family All 58
IBM Security Bulletins	Security Bulletin: Vulnerabilities in netplex JSON Smart affect watsonx.data	25 Sep 202419:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application suite Visual Inspection Component back ported version 8.9.x uses components that are vulnerable to CVE-2021-31684, CVE-2023-1370, CVEID: CVE-2023-52428, CVE-2024-7254,CVE-2024-27268.	9 Mar 202607:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	2 Aug 202515:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	26 Feb 202419:46	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 Jan 202414:39	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.13 addresses multiple security vulnerabilities.	31 Jul 202411:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components	29 Jan 202512:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with json-smart-v2 is vulnerable to a denial of service	5 Oct 202320:19	–	ibm
AstraLinux	Astra Linux - уязвимость в json-smart	20 May 202605:53	–	astralinux
Chainguard	CVE-2021-31684 vulnerabilities	1 Jun 202120:15	–	cgr

Vulners

Node

json-smart_project json-smartRange2.0-RC1–2.4.4java

OR

json-smart_project json-smartRange1.1–1.3.3java

Source	Link
github	www.github.com/netplex/json-smart-v2/issues/67
lists	www.lists.debian.org/debian-lts-announce/2023/03/msg00030.html
github	www.github.com/netplex/json-smart-v1/issues/10
github	www.github.com/netplex/json-smart-v1/pull/11
github	www.github.com/netplex/json-smart-v2/pull/68
security	www.security.netapp.com/advisory/ntap-20240621-0006/
oracle	www.oracle.com/security-alerts/cpujan2022.html
oracle	www.oracle.com/security-alerts/cpujul2022.html

21 Jun 2024 20:34Current

5.1Medium risk

Vulners AI Score5.1

CVSS 25

CVSS 3.17.5

EPSS0.00108

SSVC

json-smart denial of service arrayindexoutofboundsexception jsonparserbytearray remote attacker program crash confidential information