CVE-2018-18853: High severity spray-json vulnerability
Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of a field composed of many decimal digits.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for Lightbend Spray spray-json?
The vulnerability ID for Lightbend Spray spray-json is CVE-2018-18853.
What is the severity level of CVE-2018-18853?
CVE-2018-18853 has a severity level of high (7.5).
How does CVE-2018-18853 affect Lightbend Spray spray-json?
CVE-2018-18853 allows remote attackers to cause a denial of service (resource consumption) due to Algorithmic Complexity during the parsing of a field with many decimal digits.
Which version of Lightbend Spray spray-json is affected by CVE-2018-18853?
Lightbend Spray spray-json up to and including version 1.3.4 is affected by CVE-2018-18853.
Is there a known fix for CVE-2018-18853?
At the moment, there is no known fix for CVE-2018-18853. It is recommended to follow the recommendations provided by the vendor or product developers.