CVE-2024-21907 Improper Handling of Exceptional Conditions in Newtonsoft.Json

2024-01-0315:23:04

CWE-755

VulnCheck

github.com

cve-2024-21907

newtonsoft.json

exception vulnerability

stackoverflow

denial of service

unauthenticated attacker

AI Score

7.2

Confidence

High

EPSS

0.003

Percentile

69.8%

SSVC

Exploitation

poc

Automatable

yes

Technical Impact

partial

JSON

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.