DSA-5312: -1 libjettison-java -- security update

Published Jan 11, 2023

Updated

libjettison-java - security update

Other sources

Several flaws have been discovered in libjettison-java, a collection of StAX parsers and writers for JSON. Specially crafted user input may cause a denial of service via out-of-memory or stack overflow errors.

Affected Software

2 affected components

debian/libjettison-java

Event History

Jan 11, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2022-40149
CVE-2022-40150
CVE-2022-45685
CVE-2022-45693

Frequently Asked Questions

What impact can successful exploitation have?

Specially crafted user input can cause a denial of service by triggering out-of-memory conditions or stack overflow errors.

What must an attacker be able to do to exploit these flaws?

The attacker needs a way to supply specially crafted input to an application that uses the affected libjettison-java JSON parsers or writers.

DSA-5312: -1 libjettison-java -- security update

Other sources

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What impact can successful exploitation have?

What must an attacker be able to do to exploit these flaws?

Company

Resources

Contact

Frequently Asked Questions

What impact can successful exploitation have?

What must an attacker be able to do to exploit these flaws?