GitHub Advisoryadvisory · Maven

GHSA-2268-98wh-qfhf JLine vulnerable to out of memory error

MEDIUM Published 2023-12-29 Modified 2024-01-05 Official page ↗

Aliases: CVE-2023-50572
Ecosystem: Maven
Packages: org.jline:jline-parent
Severity: Moderate
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses: CWE-122, CWE-787
Reviewed: 2023-12-29

Affected packages

• Maven org.jline:jline-parent: < 3.25.0 → fixed in 3.25.0

Description

An issue in the component `GroovyEngine.execute` of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.

Related

Alias · CVE (1)

CVE-2023-50572 An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error. vulnerability

Weakness · CWE (2)

CWE-122 Heap-based Buffer Overflow weakness
CWE-787 Out-of-bounds Write weakness

References