CVE-2023-51074 - OpenCVE

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Json-path	Jayway Jsonpath
Redhat	Amq Streams Apache-camel-spring-boot Camel Quarkus Camel Spring Boot

Configuration 1 [-]

cpe:2.3:a:json-path:jayway_jsonpath:2.8.0:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat AMQ Streams 2.7.0
	cpe:/a:redhat:amq_streams:2	RHSA-2024:3527	2024-05-30T00:00:00Z
Red Hat build of Apache Camel 4.4.0 for Spring Boot
json-path	cpe:/a:redhat:apache-camel-spring-boot:4.4.0	RHSA-2024:2707	2024-05-06T00:00:00Z
RHBOAC camel-quarkus 3 (camel-4.0/quarkus-3.2)
json-path	cpe:/a:redhat:camel_quarkus:3	RHSA-2024:0789	2024-02-12T00:00:00Z
RHINT Camel-Springboot 3.20.5
json-path	cpe:/a:redhat:camel_spring_boot:3.20.5	RHSA-2024:0792	2024-02-12T00:00:00Z

References

Link	Providers
https://github.com/json-path/JsonPath/issues/973
https://nvd.nist.gov/vuln/detail/CVE-2023-51074
https://www.cve.org/CVERecord?id=CVE-2023-51074

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-12-27T00:00:00

Updated: 2024-08-02T22:32:08.933Z

Reserved: 2023-12-18T00:00:00

Link: CVE-2023-51074

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-12-27T21:15:08.253

Modified: 2024-01-11T20:01:29.860

Link: CVE-2023-51074

Redhat

Severity : Moderate

Publid Date: 2023-12-27T00:00:00Z

Links: CVE-2023-51074 - Bugzilla

{"affected_release": [{"advisory": "RHSA-2024:3527", "cpe": "cpe:/a:redhat:amq_streams:2", "product_name": "Red Hat AMQ Streams 2.7.0", "release_date": "2024-05-30T00:00:00Z"}, {"advisory": "RHSA-2024:2707", "cpe": "cpe:/a:redhat:apache-camel-spring-boot:4.4.0", "package": "json-path", "product_name": "Red Hat build of Apache Camel 4.4.0 for Spring Boot", "release_date": "2024-05-06T00:00:00Z"}, {"advisory": "RHSA-2024:0789", "cpe": "cpe:/a:redhat:camel_quarkus:3", "package": "json-path", "product_name": "RHBOAC camel-quarkus 3 (camel-4.0/quarkus-3.2)", "release_date": "2024-02-12T00:00:00Z"}, {"advisory": "RHSA-2024:0792", "cpe": "cpe:/a:redhat:camel_spring_boot:3.20.5", "package": "json-path", "product_name": "RHINT Camel-Springboot 3.20.5", "release_date": "2024-02-12T00:00:00Z"}], "bugzilla": {"description": "json-path: stack-based buffer overflow in Criteria.parse method", "id": "2256063", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256063"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "verified"}, "cwe": "CWE-121", "details": ["json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.", "A stack overflow vulnerability was found in the Criteria.parse() method in json-path. This issue occurs due to an uncontrolled recursion caused by specially crafted input, leading to a stack overflow. This vulnerability has the potential to trigger a crash, resulting in a denial of service."], "name": "CVE-2023-51074", "package_state": [{"cpe": "cpe:/a:redhat:amq_clients:2023", "fix_state": "Not affected", "package_name": "json-path", "product_name": "AMQ Clients"}, {"cpe": "cpe:/a:redhat:a_mq_clients:2", "fix_state": "Not affected", "package_name": "json-path", "product_name": "A-MQ Clients 2"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Not affected", "package_name": "com.amazon.opendistroforelasticsearch-opendistro_security", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:ocp_tools", "fix_state": "Will not fix", "package_name": "jenkins-2-plugins", "product_name": "OpenShift Developer Tools and Services"}, {"cpe": "cpe:/a:redhat:serverless:1", "fix_state": "Affected", "package_name": "json-path", "product_name": "OpenShift Serverless"}, {"cpe": "cpe:/a:redhat:service_registry:2", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat build of Apicurio Registry"}, {"cpe": "cpe:/a:redhat:build_keycloak:", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat Build of Keycloak"}, {"cpe": "cpe:/a:redhat:optaplanner:::el6", "fix_state": "Will not fix", "package_name": "json-path", "product_name": "Red Hat build of OptaPlanner 8"}, {"cpe": "cpe:/a:redhat:quarkus:3", "fix_state": "Will not fix", "package_name": "com.jayway.jsonpath/json-path", "product_name": "Red Hat build of Quarkus"}, {"cpe": "cpe:/a:redhat:jboss_data_grid:8", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat Data Grid 8"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_brms_platform:7", "fix_state": "Affected", "package_name": "json-path", "product_name": "Red Hat Decision Manager 7"}, {"cpe": "cpe:/a:redhat:integration:1", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat Integration Camel K"}, {"cpe": "cpe:/a:redhat:camel_quarkus:2", "fix_state": "Will not fix", "package_name": "json-path", "product_name": "Red Hat Integration Camel Quarkus"}, {"cpe": "cpe:/a:redhat:debezium:2", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat Integration Change Data Capture"}, {"cpe": "cpe:/a:redhat:amq_broker:7", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat JBoss A-MQ 7"}, {"cpe": "cpe:/a:redhat:jboss_data_grid:7", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat JBoss Data Grid 7"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat JBoss Enterprise Application Platform 6"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:6", "fix_state": "Not affected", "package_name": "org.keycloak-keycloak-parent", "product_name": "Red Hat JBoss Enterprise Application Platform 6"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat JBoss Enterprise Application Platform 7"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:8", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat JBoss Enterprise Application Platform 8"}, {"cpe": "cpe:/a:redhat:jbosseapxp", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat JBoss Enterprise Application Platform Expansion Pack"}, {"cpe": "cpe:/a:redhat:jboss_fuse:7", "fix_state": "Will not fix", "package_name": "json-path", "product_name": "Red Hat JBoss Fuse 7"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Out of support scope", "package_name": "jenkins-2-plugins", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_bpms_platform:7", "fix_state": "Will not fix", "package_name": "json-path", "product_name": "Red Hat Process Automation 7"}, {"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat Single Sign-On 7"}, {"cpe": "cpe:/a:redhat:openshift_application_runtimes:1.0", "fix_state": "Not affected", "package_name": "json-path", "product_name": "Red Hat support for Spring Boot"}, {"cpe": "cpe:/a:redhat:amq_streams:1", "fix_state": "Affected", "package_name": "json-path", "product_name": "streams for Apache Kafka"}], "public_date": "2023-12-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-51074\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-51074\nhttps://github.com/json-path/JsonPath/issues/973"], "statement": "Red Hat rates this at maximum of a Moderate impact. When interacting with a server to explore this possible vulnerability, the attacker would be the only one seeing a HTTP 500 error and no other user (or the server entirely) would be vulnerable in a real application scenario with multi-threads.", "threat_severity": "Moderate"}