Description (CNA)
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| https://github.com/stleary/JSON-java / n/a | affected 0 through 20230618 |
CWE
CWE-770
References
- https://github.com/stleary/JSON-java/issues/758
- https://github.com/stleary/JSON-java/issues/771
- http://www.openwall.com/lists/oss-security/2023/12/13/4
- https://security.netapp.com/advisory/ntap-20240621-0007/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.