CVE-2022-48623

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48623
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service.

9.1 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 Product
https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b Patch
https://github.com/rurban/Cpanel-JSON-XS/issues/208 Issue Tracking Third Party Advisory
https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes Release Notes
https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 Product
https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b Patch
https://github.com/rurban/Cpanel-JSON-XS/issues/208 Issue Tracking Third Party Advisory
https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:rurban:cpanel\:\:json\:\:xs:*:*:*:*:*:perl:*:*
History

21 Nov 2024, 07:33

Type Values Removed Values Added
References () https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 - Product () https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 - Product
References () https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b - Patch () https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b - Patch
References () https://github.com/rurban/Cpanel-JSON-XS/issues/208 - Issue Tracking, Third Party Advisory () https://github.com/rurban/Cpanel-JSON-XS/issues/208 - Issue Tracking, Third Party Advisory
References () https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes - Release Notes () https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes - Release Notes

30 Oct 2024, 14:20

Type Values Removed Values Added
CPE cpe:2.3:a:rurban:cpanel\:\:json\:\:xs:*:*:*:*:*:perl:*:*
First Time Rurban
Rurban cpanel\
References () https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 - () https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36 - Product
References () https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b - () https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b - Patch
References () https://github.com/rurban/Cpanel-JSON-XS/issues/208 - () https://github.com/rurban/Cpanel-JSON-XS/issues/208 - Issue Tracking, Third Party Advisory
References () https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes - () https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes - Release Notes

19 Aug 2024, 17:35

Type Values Removed Values Added
CWE CWE-125
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

13 Feb 2024, 14:01

Type Values Removed Values Added
Summary
  • (es) El paquete Cpanel::JSON::XS anterior a 4.33 para Perl realiza accesos fuera de los límites de una manera que permite a los atacantes obtener información confidencial o provocar una denegación de servicio.

13 Feb 2024, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-13 05:15

Updated : 2024-11-21 07:33

NVD link : CVE-2022-48623

Mitre link : CVE-2022-48623

CVE.ORG link : CVE-2022-48623

JSON object : View

Products Affected

rurban

  • cpanel\
CWE
CWE-125

Out-of-bounds Read