CVE-2023-5072

Name
CVE-2023-5072
Description
Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://github.com/stleary/JSON-java/issues/771
MISC https://github.com/stleary/JSON-java/issues/758
cve-coordination@google.com http://www.openwall.com/lists/oss-security/2023/12/13/4

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:json-java_project:json-java:*:*:*:*:*:*:*:* json-java >= None <= 20230618

Vulnerable and fixed packages

Source package Branch Version Maintainer Status