Vulnerabilities > CVE-2022-28946 - Unspecified vulnerability in Openpolicyagent Open Policy Agent 0.39.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
openpolicyagent

Summary

An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.

Vulnerable Configurations

Part Description Count
Application
Openpolicyagent
1