CVE-2023-5072
12.10.2023, 17:15
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.Enginsight
| Vendor | Product | Version |
|---|---|---|
| json-java_project | json-java | 𝑥 ≤ 20230618 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jenkins-json |
| ||||||||||||
| libjettison-java |
| ||||||||||||
| libjson-java |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jenkins-json |
| ||||||||||||||||||
| libjettison-java |
| ||||||||||||||||||
| libjson-java |
|
References