1. Home
  2. Vulnerabilities
  3. CVE-2024-23684

CVE-2024-23684

CVSS v3.1 7.5 (High)
75% Progress
EPSS 0.10 % (43th)
0.10% Progress
Affected Products 1
Advisories 1
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software Graph Web & Social Timeline

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.

Weaknesses
CWE-407
Inefficient Algorithmic Complexity
CVE Status
PUBLISHED
CNA
VulnCheck
Published Date
2024-01-19 21:15:10
(8 months ago)
Updated Date
2024-01-26 18:06:27
(7 months ago)

Affected Products

Peteroupc

Configuration #1

    CPE23 From Up To
  Peteroupc Cbor for .net from 4.0.0 version and prior 4.5.1 version cpe:2.3:a:peteroupc:cbor::*:*:*:*:.net >= 4.0.0 < 4.5.1