CVE-2023-5072
EUVD-2023-288012.10.2023, 17:15
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| stleary | json-java | 𝑥 ≤ 20230618 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jenkins-json |
| ||||||||||||
| libjettison-java |
| ||||||||||||
| libjson-java |
|
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jenkins-json |
| ||||||||||||||||||
| libjettison-java |
| ||||||||||||||||||
| libjson-java |
|
References