Jettison Out-of-bounds Write vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-45685 · ADVISORY
• jettison-json/jettison · WEB
• jettison-json/jettison · PACKAGE
• lists.debian.org/debian-lts-announce/2022/12/msg00045.html · WEB
• debian.org/security/2023/dsa-5312 · WEB

org.codehaus.jettison:jettison のその他の脆弱性

• CVE-2023-1436高 7.5An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its …
• CVE-2022-45693高 7.5Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Deni…
• CVE-2022-40150高 7.5Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on u…
• CVE-2022-40149高 7.5Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on u…