Most recent entries from all

certfr-2023-avi-0325 — De multiples vulnérabilités ont été découvertes dans les produits Oracle. Certaines d'entre elles permettent à un attaq…

certfr-2023-avi-0325

EUVD-2026-232289

fkie_cve-2022-45685

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.

GHSA-7rf3-mqpx-h7xg — Jettison Out-of-bounds Write vulnerability

Affected: Maven: org.codehaus.jettison:jettison

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.

gsd-2022-45685

OESA-2023-1914 — jettison security update

Affected: openEuler:20.03-LTS-SP1: jettison, openEuler:20.03-LTS-SP3: jettison, openEuler:22.03-LTS: jettison, openEuler:22.03-LTS-SP1: jettison, openEuler:22.03-LTS-SP2: jettison

Jettison is a collection of Java APIs (like STaX and DOM) which read and write JSON. This allows nearly transparent enablement of JSON based web services in services frameworks like CXF or XML serialization frameworks like XStream. Security Fix(es): Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.(CVE-2022-40149) Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may support a denial of service attack.(CVE-2022-40150) A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.(CVE-2022-45685) Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.(CVE-2022-45693)

openSUSE-SU-2024:12567-1 — jettison-1.5.3-1.1 on GA media

jettison-1.5.3-1.1 on GA media

RHSA-2024:3708 — Red Hat Security Advisory: Red Hat Build of Apache Camel 3.20.6 for Spring Boot security update.

OpenJDK: integer truncation issue in Xalan-J (JAXP, 8285407) jettison: stack overflow in JSONObject() allows attackers to cause a Denial of Service (DoS) via crafted JSON data santuario: Private Key disclosure in debug-log output spring-security: Broken Access Control With Direct Use of AuthenticatedVoter springframework: URL Parsing with Host Validation cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding

UBUNTU-CVE-2022-45685

Affected: Ubuntu:Pro:16.04:LTS: libjettison-java, Ubuntu:Pro:18.04:LTS: libjettison-java, Ubuntu:20.04:LTS: libjettison-java, Ubuntu:22.04:LTS: libjettison-java, Ubuntu:24.04:LTS: libjettison-java, Ubuntu:25.10: libjettison-java, Ubuntu:26.04:LTS: libjettison-java

A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.

WID-SEC-W-2023-1016 — Oracle Fusion Middleware: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Fusion Middleware ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.