CVE-2022-40149
Stack Buffer Overflow in Jettison
Summary
Stack Buffer Overflow in Jettison
Original description
The description as published by the source.
Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-40149 libjettison-java Fixed in: 1.5.3-1~deb11u1
- Ubuntu UBUNTU-CVE-2022-40149 libjettison-java Fixed in: 1.2-3ubuntu0.1~esm1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- report github.com
- web bugs.chromium.org
- web lists.debian.org