Lucene search
Veracode Vulnerability DatabaseVERACODE:32709HistoryOct 25, 2021 - 3:25 p.m.
Denial Of Service (DoS)
2021-10-2515:25:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.003 Low
EPSS
Percentile
68.8%
github.com/tidwall/gjson is vulnerable to denial of service (DoS) attacks. The vulnerability exists due to improper handling of long running matches in ‘parseObject’ in ‘gjson.go’ allowing a malicious user cause an application crash via a crafted json input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/tidwall/gjson | le | v1.9.2 | |
| github.com/tidwall/gjson | le | v1.9.2 |
Related
github
github
github.com/tidwall/gjson Vulnerable to REDoS attack
2021-10-25 19:43:15
cve
cve
CVE-2021-42836
2021-10-22 18:15:14
CVE-2021-42248
2022-05-24 15:15:07
nvd
nvd
CVE-2021-42836
2021-10-22 18:15:14
CVE-2021-42248
2022-05-24 15:15:07
prion
prion
Design/Logic Flaw
2021-10-22 18:15:00
debiancve
debiancve
CVE-2021-42836
2021-10-22 18:15:14
CVE-2021-42248
2022-05-24 15:15:07
cvelist
cvelist
CVE-2021-42836
2021-10-22 17:22:47
ubuntucve
ubuntucve
CVE-2021-42836
2021-10-22 00:00:00
osv
osv
github.com/tidwall/gjson Vulnerable to REDoS attack
2021-10-25 19:43:15
ReDoS via crafted JSON input in GJSON
2022-05-25 00:00:38
CVE-2021-42836
2021-10-22 18:15:14
ibm
ibm
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0041
2023-06-29 00:00:00