Lucene search
Ubuntu.comUB:CVE-2023-1436HistoryMar 22, 2023 - 12:00 a.m.
CVE-2023-1436
2023-03-2200:00:00
ubuntu.com
ubuntu.com
17
infinite recursion
jettison
collection
stackoverflowerror
cve-2023-1436
self-referencing
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
32.6%
An infinite recursion is triggered in Jettison when constructing a
JSONArray from a Collection that contains a self-reference in one of its
elements. This leads to a StackOverflowError exception being thrown.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libjettison-java | < 1.4.0-1ubuntu0.18.04.1~esm2 | UNKNOWN |
| ubuntu | 20.04 | noarch | libjettison-java | < 1.4.0-1ubuntu0.20.04.1+esm1 | UNKNOWN |
| ubuntu | 22.04 | noarch | libjettison-java | < 1.4.1-1ubuntu0.22.04.1+esm1 | UNKNOWN |
| ubuntu | 22.10 | noarch | libjettison-java | < 1.4.1-1ubuntu0.22.10.2 | UNKNOWN |
| ubuntu | 23.04 | noarch | libjettison-java | < 1.5.3-1ubuntu0.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | libjettison-java | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | libjettison-java | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libjettison-java | < 1.2-3ubuntu0.1~esm2 | UNKNOWN |
Related
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2023-03-25 01:50:32
amazon
amazon
Important: jettison
2023-05-25 17:41:00
ubuntu
ubuntu
Jettison vulnerability
2023-06-20 00:00:00
nessus
nessus
Amazon Linux 2 : jettison (ALAS-2023-2053)
2023-06-05 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM / 22.04 ESM / 23.04 : Jettison vulnerability (USN-6179-1)
2023-06-20 00:00:00
Oracle Enterprise Manager Ops Center (January 2024 CPU)
2024-01-19 00:00:00
osv
osv
Jettison vulnerable to infinite recursion
2023-03-22 06:30:21
libjettison-java vulnerability
2023-06-20 10:11:48
CVE-2023-1436
2023-03-22 06:15:09
nvd
nvd
CVE-2023-1436
2023-03-22 06:15:09
prion
prion
Design/Logic Flaw
2023-03-22 06:15:00
atlassian
atlassian
cvelist
cvelist
debiancve
debiancve
CVE-2023-1436
2023-03-22 06:15:09
openvas
openvas
Ubuntu: Security Advisory (USN-6179-1)
2023-06-21 00:00:00
cve
cve
CVE-2023-1436
2023-03-22 06:15:09
redhatcve
redhatcve
CVE-2023-1436
2023-03-30 10:13:52
github
github
Jettison vulnerable to infinite recursion
2023-03-22 06:30:21
redhat
redhat
(RHSA-2023:3667) Moderate: Red Hat Integration Camel Extensions for Quarkus 2.13.3 security update
2023-06-19 16:31:18
(RHSA-2023:4506) Important: Red Hat JBoss Enterprise Application Platform security update
2023-08-07 14:59:17
(RHSA-2023:4924) Important: Red Hat Single Sign-On 7.6.5 security update
2023-08-31 13:27:26
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
32.6%
Related for UB:CVE-2023-1436