CVE-2024-23684
Assigner: VulnCheck
Published: 2024-01-19T20:59:02.723Z
State: PUBLISHED
affected: collectionURL: https://repo.maven.apache.org/maven2
defaultStatus: unaffected
packageName: com.upokecenter:cbor
versions: lessThan: 4.5.1
status: affected
version: 4.0.0
versionType: maven
descriptions: supportingMedia: base64: no
type: text/html
value: <p>Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.</p>
value: Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.


problemTypes: descriptions: cweId: CWE-407
description: CWE-407 Inefficient Algorithmic Complexity
type: CWE
source: discovery: INTERNAL
title: upokecenter CBOR Denial of Service