Bug 2256063 (CVE-2023-51074)

Summary:	CVE-2023-51074 json-path: stack-based buffer overflow in Criteria.parse method
Product:	[Other] Security Response	Reporter:	TEJ RATHI <trathi>
Component:	vulnerability	Assignee:	Sayan Biswas <sabiswas>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	adupliak, aileenc, anstephe, asatyam, asoldano, ataylor, avibelli, bbaranow, bdettelb, bgeorges, bmaxwell, boliveir, brian.stansberry, caswilli, ccranfor, cdewolf, chazlett, chfoley, clement.escoffier, cmiranda, cmoulliard, dandread, darran.lofthouse, dhanak, diagrawa, dkreling, dosoudil, drichtar, dsimansk, eric.wittmann, fjansen, fjuma, fmariani, fmongiar, gmalinko, gsmet, ibek, ikanello, ivassile, iweiss, janstey, jcantril, jmartisk, jnethert, jpechane, jpoth, jrokos, jross, jscholz, kaycoth, kingland, kverlaen, lgao, lthon, matzew, max.andersen, mnovotny, mosmerov, msochure, mstefank, msvehla, mulliken, nwallace, olubyans, pantinor, pcongius, pdelbell, pdrozd, peholase, pgallagh, pierdipi, pjindal, pmackay, probinso, pskopek, rguimara, rhuss, rkieley, rowaters, rruss, rstancel, rsvoboda, saroy, sbiarozk, smaestri, sthorger, swoodman, tcunning, tom.jenkinson, tqvarnst, yfang
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A stack overflow vulnerability was found in the Criteria.parse() method in json-path. This issue occurs due to an uncontrolled recursion caused by specially crafted input, leading to a stack overflow. This vulnerability has the potential to trigger a crash, resulting in a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2256064

Description TEJ RATHI 2023-12-28 06:06:48 UTC

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.

https://github.com/json-path/JsonPath/issues/973

Comment 12 Patrick Del Bello 2024-01-24 14:34:13 UTC

Downgrading this flaw to Moderate impact, especially to match NVD CVSS and also our impact rating which, as explained in the statement section, there is a very specific scenario for this flaw to be explored.

Comment 14 errata-xmlrpc 2024-02-12 16:02:16 UTC

This issue has been addressed in the following products:

  RHBOAC camel-quarkus 3 (camel-4.0/quarkus-3.2)

Via RHSA-2024:0789 https://access.redhat.com/errata/RHSA-2024:0789

Comment 15 errata-xmlrpc 2024-02-12 17:38:01 UTC

This issue has been addressed in the following products:

  RHINT Camel-Springboot 3.20.5

Via RHSA-2024:0792 https://access.redhat.com/errata/RHSA-2024:0792

Comment 20 errata-xmlrpc 2024-05-06 14:10:27 UTC

This issue has been addressed in the following products:

  Red Hat build of Apache Camel 4.4.0 for Spring Boot

Via RHSA-2024:2707 https://access.redhat.com/errata/RHSA-2024:2707

Comment 22 errata-xmlrpc 2024-05-30 20:25:31 UTC

This issue has been addressed in the following products:

  Red Hat AMQ Streams 2.7.0

Via RHSA-2024:3527 https://access.redhat.com/errata/RHSA-2024:3527