CVE-2024-21909
Assigner: VulnCheck
Published: 2024-01-03T15:41:57.739Z
State: PUBLISHED
affected: collectionURL: https://nuget.org/packages
defaultStatus: unaffected
packageName: PeterO.Cbor
versions: lessThan: 4.5.1
status: affected
version: 4.0.0
versionType: semver 2.0.0
descriptions: supportingMedia: base64: no
type: text/html
value: PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of 
service vulnerability. An attacker may trigger the denial of service 
condition by providing crafted data to the DecodeFromBytes or other 
decoding mechanisms in PeterO.Cbor. Depending on the usage of the 
library, an unauthenticated and remote attacker may be able to cause the
 denial of service condition.<br>
value: PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of 
service vulnerability. An attacker may trigger the denial of service 
condition by providing crafted data to the DecodeFromBytes or other 
decoding mechanisms in PeterO.Cbor. Depending on the usage of the 
library, an unauthenticated and remote attacker may be able to cause the
 denial of service condition.

problemTypes: descriptions: cweId: CWE-407
description: CWE-407 Inefficient Algorithmic Complexity
type: CWE
source: discovery: INTERNAL
title: Denial of service in CBOR library