VDB
BDU%3A2023-07864
BDU%3A2023-07864
PUBLISHED
CVSS 9 CRITICAL
Уязвимость метода parse библиотеки json5 пакетного менеджера NPM, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
9
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, АО "НППКТ" | Red Hat Single Sign-On, Red Hat Integration Camel K, Red Hat Integration Camel Quarkus, Red Hat Advanced Cluster Management for Kubernetes, Red Hat OpenShift GitOps, Red Hat Satellite, Red Hat Integration Camel for Spring Boot, Migration Toolkit for Virtualization, Red Hat OpenShift Virtualization, Red Hat Discovery, Red Hat Migration Toolkit for Containers, Red Hat Advanced Cluster Security, Red Hat OpenShift Dev Spaces, OpenShift Pipelines, Red Hat OpenShift distributed tracing, Red Hat Enterprise Linux Server, JSON5, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913) |
Timeline
- Nov 15, 2023 CVE Published
- Jan 9, 2024 CVE Updated
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3S26TLPLVFAJTUN3VIXFDEBEXDYO22CE/ url
- https://access.redhat.com/security/cve/CVE-2022-46175 url
- https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8 url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.9/ url
- https://github.com/json5/json5/issues/199 advisory
- https://github.com/json5/json5/issues/295 advisory
- https://github.com/json5/json5/pull/298 advisory
- https://security-tracker.debian.org/tracker/CVE-2022-46175 advisory
- https://access.redhat.com/security/cve/cve-2022-46175 advisory