CVE-2022-45685: Buffer Overflow
Published Dec 13, 2022
·Updated
A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.
Other sources
Jettison is vulnerable to a denial of service, caused by a stack-based buffer overflow. By sending an overly long string using JSON data, a remote attacker could exploit this vulnerability to cause a denial of service.
— IBM
Affected Software
11 affected componentsFixes available
debian/libjettison-java<=1.4.0-1
1.5.3-1~deb10u11.5.3-1~deb11u11.5.3-11.5.4-1
IBM Data Virtualization on Cloud Pak for Data<=3.0
IBM Watson Query on Cloud Pak for Data<=2.2
IBM Watson Query on Cloud Pak for Data<=2.1
IBM Watson Query on Cloud Pak for Data<=2.0
IBM Data Virtualization on Cloud Pak for Data<=1.8
IBM Data Virtualization on Cloud Pak for Data<=1.7
redhat/jettison<1.5.2
1.5.2
Jettison Project Jettison<1.5.2
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Event History
Dec 13, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jun 13, 2023
Data Sourced
via Red Hat·06:24 PM
DescriptionSeverityAffected Software
Aug 15, 2025
Data Sourced
via IBM·03:29 PM
DescriptionAffected Software