Jettison Out-of-bounds Write vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-45685 · ADVISORY
• jettison-json/jettison · WEB
• jettison-json/jettison · PACKAGE
• lists.debian.org/debian-lts-announce/2022/12/msg00045.html · WEB
• debian.org/security/2023/dsa-5312 · WEB

More vulnerabilities in org.codehaus.jettison:jettison

• CVE-2023-1436HIGH 7.5An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its …
• CVE-2022-45693HIGH 7.5Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Deni…
• CVE-2022-40150HIGH 7.5Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on u…
• CVE-2022-40149HIGH 7.5Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on u…