OSV-2023-1300

    Dashboard / Vulnerabilities / OSV-2023-1300

    OSV-2023-1300

    Published: 14 Dec 2023Last Modified: 14 Dec 2023

    Summary: Security exception in com.fasterxml.jackson.core.JsonParser.currentName

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024 ``` Crash type: Security exception Crash state: com.fasterxml.jackson.core.JsonParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.currentName com.fasterxml.jackson.dataformat.yaml.YAMLParser.getCurrentName ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65024

    Affected packages

    Package

    Name: jackson-dataformats-text

    Purl: pkg:generic/jackson-dataformats-text

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6b3977368d0795664e204ed59b09f48ddca6934d
    Fixed -5aabe075fb0fb87c8f48c676e3fe8e84fa683262

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-1300 | CVE-DB