CVE-2023-5072

stleary/JSON-java

on github

Published

October 12, 2023

Severity

CVSS v3:

7.5 HIGH

CVSS v2:

N/A

Description

Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

References

https://github.com/stleary/JSON-java/issues/771
https://github.com/stleary/JSON-java/issues/758
http://www.openwall.com/lists/oss-security/2023/12/13/4

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:json-java_project:json-java::::::::	n/a	20230618 (including)	*

External Links

NVD - CVE-2023-5072