OSV-2023-1382

    Dashboard / Vulnerabilities / OSV-2023-1382

    OSV-2023-1382

    Published: 1 Jan 2024Last Modified: 1 Jan 2024

    Summary: Security exception in com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65429 ``` Crash type: Security exception Crash state: com.puppycrawl.tools.checkstyle.grammar.java.JavaLanguageParser.expr java.base/sun.nio.cs.UTF_8.updatePositions java.base/sun.nio.cs.UTF_8$Encoder.encodeArrayLoop ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65429

    Affected packages

    Package

    Name: checkstyle

    Purl: pkg:generic/checkstyle

    Affected ranges

    Type: GIT

    Events:

    Introduced- 9c787dac7c647320d113acb1a42944d29990d7ee
    Fixed -13090c515ec207c88f41c8e8646460ff7de76f7f

    Affected versions

    checkstyle-10.12.7

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-1382 | CVE-DB