High severity7.5NVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026
CVE-2022-45685
CVE-2022-45685
Description
A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.codehaus.jettison:jettisonMaven | < 1.5.2 | 1.5.2 |
Affected products
10- Jettison/Jettisondescription
- osv-coords6 versionspkg:rpm/opensuse/jettison&distro=openSUSE%20Tumbleweedpkg:apk/wolfi/druidpkg:apk/wolfi/druid-compatpkg:maven/org.codehaus.jettison/jettisonpkg:apk/chainguard/druidpkg:apk/chainguard/druid-compat
< 1.5.3-1.1+ 5 more
- (no CPE)range: < 1.5.3-1.1
- (no CPE)range: < 35.0.1-r5
- (no CPE)range: < 34.0.0-r6
- (no CPE)range: < 1.5.2
- (no CPE)range: < 35.0.1-r5
- (no CPE)range: < 34.0.0-r6
Patches
Vulnerability mechanics
References
5- github.com/jettison-json/jettison/issues/54nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-7rf3-mqpx-h7xgghsaADVISORY
- lists.debian.org/debian-lts-announce/2022/12/msg00045.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2022-45685ghsaADVISORY
- www.debian.org/security/2023/dsa-5312nvdThird Party AdvisoryWEB
News mentions
0No linked articles in our index yet.