CVE-2023-3040

CVSS V2 None CVSS V3 None

Description

A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access bug that could have allowed an attacker to launch a DoS if the function was used to parse untrusted input data. It is important to note that because this debug function was only used in tests and demos, it was not exploitable in a normal environment.

Overview

CVE ID
CVE-2023-3040

Assigner
cloudflare

Vulnerability Status
PUBLISHED

Published Version
2023-06-14T11:54:51.131Z

Last Modified Date
2023-06-14T11:55:19.181Z

Weakness Enumerations

CWE	URL
CWE-125	http://cwe.mitre.org/data/definitions/125.html

References

Reference URL	Reference Tags
https://github.com/cloudflare/lua-resty-json/pull/14
https://github.com/cloudflare/lua-resty-json/security/advisories/GHSA-h8rp-9622-83pg

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3040
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3040

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 20:40:35				Added to TrackCVE