Denial Of Service (DoS)

2023-03-2722:04:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

denial of service

spring framework

vulnerability

expression language

parser

cpu memory

system crash

0.001 Low

EPSS

Percentile

48.7%

JSON

Spring Framework is vulnerable to Denial of Service (DoS). The vulnerability is due to a lack of max repeated words and max number of character logic in the Spring Expression Language parser located in the getValueInternal function of OpMultiply and the getValueInternal function in OperatorMatches, which can trigger an infinite loop and consume excessive CPU memory, possibly leading to a system crash.

CPENameOperatorVersion
spring expression language (spel)le6.0.6
spring expression language (spel)le5.2.22.RELEASE
spring expression language (spel)le5.0.1.RELEASE
spring expression language (spel)le5.3.25
spring expression language (spel)le6.0.6
spring expression language (spel)le5.2.22.RELEASE
spring expression language (spel)le5.0.1.RELEASE
spring expression language (spel)le5.3.25
ovirt-dependencieseq4.5.1__1.el8
ovirt-dependencieseq4.5.2__1.el8ev

Name	Operator	Version
spring expression language (spel)	le	6.0.6
spring expression language (spel)	le	5.2.22.RELEASE
spring expression language (spel)	le	5.0.1.RELEASE
spring expression language (spel)	le	5.3.25
spring expression language (spel)	le	6.0.6
spring expression language (spel)	le	5.2.22.RELEASE
spring expression language (spel)	le	5.0.1.RELEASE
spring expression language (spel)	le	5.3.25
ovirt-dependencies	eq	4.5.1__1.el8
ovirt-dependencies	eq	4.5.2__1.el8ev