CVE-2024-57699

Aliases:GHSA-pq2g-wx69-c263DEBIAN-CVE-2024-57699CGA-22hq-rpg9-6f4pCGA-2q72-q7qj-6943CGA-2xgc-7643-mg6jCGA-35jg-qfxv-5pmjCGA-37mj-39w4-8q4rCGA-393v-g4vx-83q5CGA-3c52-36xv-5g9cCGA-3cq7-qqmm-ph5fCGA-3m7x-q8rj-wpc7CGA-3r5p-4642-4m86CGA-3rr6-jmph-c6x7CGA-42cq-pqvr-mxfwCGA-442p-5mrm-j9c7CGA-4c3v-vc89-hrhwCGA-4g3v-wq48-3j78CGA-4gcx-xgpp-9mc8CGA-4j94-5974-8hrhCGA-4w2c-c3qq-84j4CGA-53cv-545g-6758CGA-58c3-68c2-prmgCGA-599c-469g-37q8CGA-5c2m-rgq8-v5hmCGA-5jpg-gv25-w42fCGA-5p89-wv3r-hpxrCGA-5w6c-w3vp-ghmqCGA-5xp2-mvpf-qjcqCGA-64fm-7q7p-pm9qCGA-6543-hm5p-8vwwCGA-66w8-jcff-mh34CGA-66xj-pmq4-9pmxCGA-69hr-3vv5-w344CGA-6c3q-6r6q-m39gCGA-6c92-3vgv-cm63CGA-6hrf-4vcj-v22vCGA-6r2f-44q8-rh2fCGA-6rpm-5p45-w347CGA-6w54-j3m3-j5pwCGA-6w9f-c89v-88fqCGA-6x7v-x685-78xrCGA-727v-92gc-8jh4CGA-72r5-23xh-w5w2CGA-72r6-wj8c-53prCGA-72xw-3c25-fg5xCGA-75rj-5cfv-mvx9CGA-7745-p8xr-74gfCGA-793c-5mcv-4pj4CGA-7m4c-f856-4hfcCGA-7mp2-cr6c-2fvgCGA-7w39-66j2-rgqvCGA-82mv-c629-633gCGA-8722-r4x4-r55mCGA-89pf-hj8r-c4ppCGA-8r4x-55qj-956cCGA-8wqj-rfq9-6mqcCGA-8xch-6vr4-f8phCGA-9595-3v89-53pxCGA-96pv-6hph-g469CGA-9cwm-mwg2-2pg7CGA-9f72-cj9v-j2jqCGA-9m4m-mg95-2xp4CGA-9vp6-xgc7-6f63CGA-9vrv-j2p3-vpcqCGA-9wfh-m9q7-9ghhCGA-c3wq-v925-9vq3CGA-cf3g-pjjc-2r4fCGA-cqwg-m463-f35gCGA-cr9q-cxxr-g97pCGA-cw3j-h9mw-w77jCGA-cxhx-37c2-qwcrCGA-cxvp-rf8j-w8xqCGA-f9v9-qhqw-x39hCGA-fc8f-xw8w-3xx8CGA-fcj9-6w5c-rp64CGA-fjg9-mjgh-w24fCGA-frph-6ph6-mjqwCGA-fx2f-jmmh-px55CGA-g8pr-6qmc-c38vCGA-gjp3-q469-549fCGA-gpvj-g39h-j9hwCGA-grj4-mg6m-g6vfCGA-gx6c-p6q9-59phCGA-h4xg-7q9m-34j8CGA-h96r-jgm6-w4qxCGA-h9fc-wc9x-pr36CGA-hfqm-9r4p-wx2gCGA-hg5c-xmcc-7x8hCGA-hgmx-j9gq-vqqxCGA-hgr7-j3rq-hr6jCGA-hmw3-x7gc-2rq3CGA-hv7f-7288-xj34CGA-j3c9-j843-vr27CGA-j46p-5fcf-95wxCGA-j6wr-hf9p-fw24CGA-jh4w-wp8m-ccf5CGA-jh65-fq37-w48rCGA-jj88-xhrq-whc4CGA-jjcq-fffr-7mj5CGA-jp74-f7jc-fgvmCGA-jvv4-jwj6-9mwxCGA-jwq5-w4gf-66phCGA-jx4c-r3r3-f956CGA-jx6x-97wj-2jm3CGA-m2q7-54qm-mf4hCGA-m6q5-39f5-26rpCGA-mg7g-wj9g-vxqhCGA-mmf3-22wr-q3m9CGA-mrp4-6675-f339CGA-mw75-8ggr-7pjwCGA-p499-74vf-ghm5CGA-p68x-4q85-m3g5CGA-p7fq-x2x9-4h7qCGA-p856-hf29-46gmCGA-p96f-vqqv-5cr4CGA-pw2h-c53c-g426CGA-q259-rrx5-xvv7CGA-q29x-ch4m-68qwCGA-q2v8-mfj8-5fwrCGA-q6p7-8m6x-4c3xCGA-q7vv-2qcr-78w2CGA-q897-wg2p-33m5CGA-q98h-cpxw-h983CGA-q9vq-5w56-fchjCGA-qcc4-wghm-6v75CGA-qf93-44q4-2565CGA-qm45-w79h-qqhqCGA-qxpw-c9gh-v6r2CGA-r436-r7c6-rfr7CGA-rc34-f5x5-h5j2CGA-rcrx-94hp-w385CGA-rjhm-c25x-8w3jCGA-v37r-vm9j-g4f7CGA-v7qp-5j85-qpg4CGA-v7xf-73mq-j8xqCGA-v9x4-3q8f-8264CGA-w8pr-35wm-j769CGA-wf8x-9q4c-j352CGA-wrgc-x579-qw43CGA-wv7q-jq7q-h332CGA-xgw5-8jxp-vr24CGA-xq5g-53jw-h5p3CGA-xqc9-cxf7-x6hfCGA-xrw9-q3f3-pgvx
Advisory lineage Upstream: 0 Downstream: 9
Deferred
Published: 05 Feb 2025, 00:00
Last modified:06 Feb 2025, 15:15

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
0.59% LOW
1% probability +0.56%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 Feb 2025, 00:00
Published
Vulnerability first disclosed
06 Feb 2025, 15:15
Last Modified
Vulnerability information updated

Description

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.59%• Percentile: 47%

Techniques & Countermeasures

  • CWE-674•Uncontrolled Recursion

    The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected Systems

  • chainguard•akhq

    < 0.25.1-r3

  • chainguard•apache-nifi

    < 2.3.0-r0

  • chainguard•apache-nifi-compat

    < 2.3.0-r0

  • chainguard•apache-nifi-toolkit

    < 2.3.0-r0

  • chainguard•apicurio-registry

    < 3.1.7-r1 | < 3.0.6-r1

  • chainguard•apicurio-registry-nginx-config

    < 3.0.6-r1

  • chainguard•apicurio-registry-ui

    < 3.0.6-r1

  • chainguard•dependency-track

    < 4.13.0-r1

  • chainguard•dependency-track-bundled

    < 4.13.0-r1

  • chainguard•opensearch-2

    < 2.19.4-r0

  • chainguard•sonarqube-10

    all

  • chainguard•trino

    < 471-r0

  • chainguard•trino-config

    < 471-r0

  • chainguard•trino-oci-entrypoint

    < 471-r0

  • chainguard•trino-plugin-ai-functions

    < 471-r0

  • chainguard•trino-plugin-bigquery

    < 471-r0

  • chainguard•trino-plugin-blackhole

    < 471-r0

  • chainguard•trino-plugin-cassandra

    < 471-r0

  • chainguard•trino-plugin-clickhouse

    < 471-r0

  • chainguard•trino-plugin-delta-lake

    < 471-r0

  • chainguard•trino-plugin-druid

    < 471-r0

  • chainguard•trino-plugin-duckdb

    < 471-r0

  • chainguard•trino-plugin-elasticsearch

    < 471-r0

  • chainguard•trino-plugin-exasol

    < 471-r0

  • chainguard•trino-plugin-exchange-filesystem

    < 471-r0

  • chainguard•trino-plugin-exchange-hdfs

    < 471-r0

  • chainguard•trino-plugin-faker

    < 471-r0

  • chainguard•trino-plugin-functions-python

    < 471-r0

  • chainguard•trino-plugin-geospatial

    < 471-r0

  • chainguard•trino-plugin-google-sheets

    < 471-r0

  • chainguard•trino-plugin-hive

    < 471-r0

  • chainguard•trino-plugin-http-event-listener

    < 471-r0

  • chainguard•trino-plugin-http-server-event-listener

    < 471-r0

  • chainguard•trino-plugin-hudi

    < 471-r0

  • chainguard•trino-plugin-iceberg

    < 471-r0

  • chainguard•trino-plugin-ignite

    < 471-r0

  • chainguard•trino-plugin-jmx

    < 471-r0

  • chainguard•trino-plugin-kafka

    < 471-r0

  • chainguard•trino-plugin-kafka-event-listener

    < 471-r0

  • chainguard•trino-plugin-lakehouse

    < 471-r0

  • chainguard•trino-plugin-ldap-group-provider

    < 471-r0

  • chainguard•trino-plugin-loki

    < 471-r0

  • chainguard•trino-plugin-mariadb

    < 471-r0

  • chainguard•trino-plugin-memory

    < 471-r0

  • chainguard•trino-plugin-ml

    < 471-r0

  • chainguard•trino-plugin-mongodb

    < 471-r0

  • chainguard•trino-plugin-mysql

    < 471-r0

  • chainguard•trino-plugin-mysql-event-listener

    < 471-r0

  • chainguard•trino-plugin-opa

    < 471-r0

  • chainguard•trino-plugin-openlineage

    < 471-r0

Showing first 50 affected entries in server-rendered view.

References (9)