CVE-2018-18854 - Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code)

Back Back to CVE browser

HIGH

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code)

Published Oct 31, 2018

7.5

HIGH

CVSS 3.0

EPSS 1.90%

Description

Lightbend Spray spray-json through 1.3.4 allows remote attackers to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (3)

https://github.com/advisories/GHSA-q8xj-8xg3-w432
Advisory
https://github.com/spray/spray-json/issues/277
x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18854

Link	Providers	Tags
https://github.com/advisories/GHSA-q8xj-8xg3-w432		Advisory
https://github.com/spray/spray-json/issues/277		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-18854