CVE-2022-45685: Buffer Overflow
Published Dec 13, 2022
·Updated
A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.
Other sources
Jettison is vulnerable to a denial of service, caused by a stack-based buffer overflow. By sending an overly long string using JSON data, a remote attacker could exploit this vulnerability to cause a denial of service.
— IBM
Affected Software
14 affected componentsFixes available
Jettison Project Jettison<1.5.2
Debian Debian Linux=10.0
Debian Debian Linux=11.0
IBM Data Virtualization on Cloud Pak for Data<=3.0
IBM Watson Query on Cloud Pak for Data<=2.2
IBM Watson Query on Cloud Pak for Data<=2.1
IBM Watson Query on Cloud Pak for Data<=2.0
IBM Data Virtualization on Cloud Pak for Data<=1.8
IBM Data Virtualization on Cloud Pak for Data<=1.7
redhat/jettison<1.5.2
1.5.2
debian/libjettison-java<1.5.3-1
1.5.3-1
debian/libjettison-java<1.5.3-1
1.5.3-1
debian/libjettison-java<1.5.3-1
1.5.3-1
debian/libjettison-java
1.5.3-11.5.4-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/jettisonto a version that resolves this vulnerability.Fixed in 1.5.2 - Upgrade
Upgrade
debian/libjettison-javato a version that resolves this vulnerability.Fixed in 1.5.3-1Fixed in 1.5.4-1 - Upgrade
Upgrade
debian/libjettison-javato a version that resolves this vulnerability.Fixed in 1.5.3-1
Event History
Dec 13, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·03:15 PM
DescriptionSeverityAffected Software
Jun 13, 2023
Data Sourced
via Red Hat·06:24 PM
DescriptionSeverityAffected Software
Apr 3, 2025
Data Sourced
via IBM·12:00 AM
DescriptionAffected Software