Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44911
HistoryJan 02, 2024 - 7:52 a.m.

Denial Of Service (DoS)

2024-01-0207:52:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
denial of service
dos
org.jline
jline-groovy
vulnerability
row size limits
output printing
memory error
groovyengine.execute

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

0

Percentile

12.7%

org.jline, jline-groovy is vulnerable to Denial Of Service (DoS). The vulnerability is due to a lack of row size limits when printing output, resulting in an out of memory error when the groovyEngine.execute method is passed with a crafted input.

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.7

Confidence

High

EPSS

0

Percentile

12.7%