CVE-2024-23684CWE-407

upokecenter CBOR Denial of Service

High · published January 19, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00920 · 59.9th percentile
Weakness
CWE-407 · Inefficient Algorithmic Complexity
Published
2024-01-19T20:59Z
EPSS history
Timeline
  • 19 JAN 20:59Z
    upokecenter CBOR Denial of Service
    cvelistv5