OSV-2023-1222

    Dashboard / Vulnerabilities / OSV-2023-1222

    OSV-2023-1222

    Published: 27 Nov 2023Last Modified: 27 Nov 2023

    Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64514 ``` Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/java.nio.ByteBuffer.position java.base/sun.nio.cs.UTF_8.updatePositions ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64514

    Affected packages

    Package

    Name: checkstyle

    Purl: pkg:generic/checkstyle

    Affected ranges

    Type: GIT

    Events:

    Introduced- 55097468aa37d890b0e7b89ac2d27d08c16aee59
    Fixed -c3db55ba703327c427291ac09968af7a962b0375

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-1222 | CVE-DB