Vulnerabilities > CVE-2021-31684 - Out-of-bounds Write vulnerability in multiple products

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

json-smart-project

oracle

CWE-787

NVD

Published: 2021-06-01

Updated: 2022-07-25

Summary

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.

Vulnerable Configurations

Part	Description	Count
Application	Json-Smart_Project Json Smart Project Json Smart V1 1.3.1 Json Smart Project Json Smart V1 1.3.2 Json Smart Project Json Smart V2 2.4 Json Smart Project Json Smart V2 2.4.1	4
Application	Oracle Oracle Utilities Framework 4.4.0.0.0 Oracle Utilities Framework 4.4.0.2.0 Oracle Utilities Framework 4.4.0.3.0	3

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://github.com/netplex/json-smart-v1/issues/10
https://github.com/netplex/json-smart-v1/pull/11
https://github.com/netplex/json-smart-v2/issues/67
https://github.com/netplex/json-smart-v2/pull/68
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html