Jettison Out-of-bounds Write vulnerability

ALTO 7.5CVE-2022-45693 · GHSA-grr4-wv38-f68w · Published 13/12/2022 · updated 17/06/2026

In breve

CVE-2022-45693 è una vulnerabilità ALTO (CVSS 7.5) che riguarda org.codehaus.jettison:jettison, jettison (jettison project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.5%, superiore al 74.2% delle vulnerabilità.
Correzione: aggiornare a 1.5.2 o successiva.

Package	Affected versions	Patched versions
org.codehaus.jettison:jettison Maven	`< 1.5.2`	`1.5.2`
jettison jettison_project	`< 1.5.2`	`1.5.2`

Description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

NVD description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

References

nvd.nist.gov/vuln/detail/CVE-2022-45693 · ADVISORY
jettison-json/jettison · WEB
jettison-json/jettison · PACKAGE
lists.debian.org/debian-lts-announce/2022/12/msg00045.html · WEB
debian.org/security/2023/dsa-5312 · WEB

Altre vulnerabilità di org.codehaus.jettison:jettison

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.codehaus.jettison:jettison

Maven

< 1.5.2

1.5.2

jettison

jettison_project

< 1.5.2

1.5.2

Description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

NVD description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

Altre vulnerabilità di org.codehaus.jettison:jettison

Vedi tutto →