CVE-2024-21909

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-21909
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-21909.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-21909
Aliases
Published
2024-01-03T15:41:57.739Z
Modified
2026-07-16T03:30:53.602911159Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Denial of service in CBOR library
Details

PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial of service vulnerability. An attacker may trigger the denial of service condition by providing crafted data to the DecodeFromBytes or other decoding mechanisms in PeterO.Cbor. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.

Database specific 
{
    "cwe_ids": [
        "CWE-407"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/21xxx/CVE-2024-21909.json"
}
References

Affected packages

Git / github.com/peteroupc/cbor

Affected ranges

Type
GIT
Repo
https://github.com/peteroupc/cbor
Events
Introduced
a06712788d5af3bb75a214d74238525b5a62baaa
Fixed
f74930528be1d86ccfd431e21629bfba7a4be20d
Fixed
b4117dbbb4cd5a4a963f9d0c9aa132f033e15b95
Database specific 
{
    "cpe": "cpe:2.3:a:peteroupc:cbor:*:*:*:*:*:.net:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.5.1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v4.*
v4.0.0
v4.0.1
v4.1.0
v4.2.0
v4.3.0
v4.4.0
v4.4.1
v4.4.2
v4.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-21909.json"