CVE-2022-45693

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

References

Affected packages

Debian:11 / libjettison-java

Package

Name: libjettison-java
Purl: pkg:deb/debian/libjettison-java?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-1~deb11u1

Affected versions

1.*

1.4.1-1

1.5.1-1

1.5.3-1~deb10u1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libjettison-java

Package

Name: libjettison-java
Purl: pkg:deb/debian/libjettison-java?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libjettison-java

Package

Name: libjettison-java
Purl: pkg:deb/debian/libjettison-java?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/jettison-json/jettison

Affected ranges

Type: GIT
Repo: https://github.com/jettison-json/jettison
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

6dc73a07ac47c7e3b4c7d041761fbc11aee2eb50

Affected versions

jettison-1.*

jettison-1.3.8

jettison-1.4.0

jettison-1.4.1

jettison-1.5.0

jettison-1.5.1