CVE-2022-48623 - The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service

Back Back to CVE browser

CRITICAL

The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service

Published Feb 13, 2024

9.1

CRITICAL

CVSS 3.1

EPSS 0.79%

Description

The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive information or cause a denial of service.

Affected products

Vendor cPanel Product cPanel Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <4.33

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

cPanel

n/a

Version	Status	Constraints
0	affected	<4.33

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51318
Advisory
https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36
Product
https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b
Patch
https://github.com/rurban/Cpanel-JSON-XS/issues/208
Issue TrackingThird Party Advisory
https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes
Release Notes

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51318		Advisory
https://github.com/briandfoy/cpan-security-advisory/blob/9374f98bef51e1ae887f293234050551c079776f/cpansa/CPANSA-Cpanel-JSON-XS.yml#L25-L36		Product
https://github.com/rurban/Cpanel-JSON-XS/commit/41f32396eee9395a40f9ed80145c37622560de9b		Patch
https://github.com/rurban/Cpanel-JSON-XS/issues/208		Issue TrackingThird Party Advisory
https://metacpan.org/release/RURBAN/Cpanel-JSON-XS-4.33/changes		Release Notes