CVE-2022-40152
Stack Buffer Overflow in Woodstox
Summary
Stack Buffer Overflow in Woodstox
Original description
The description as published by the source.
Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-40152 libwoodstox-java
- Ubuntu UBUNTU-CVE-2022-40152 libxstream-java
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web bugs.chromium.org