UBUNTU-CVE-2024-23079

Source
https://ubuntu.com/security/CVE-2024-23079
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-23079.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-23079
Withdrawn
2025-06-23T15:57:36Z
Published
2024-04-08T23:15:00Z
Modified
2024-04-08T23:15:00Z
Summary
[none]
Details

** DISPUTED ** JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

References

Affected packages

Ubuntu:22.04:LTS / jgrapht

Package

Name
jgrapht
Purl
pkg:deb/ubuntu/jgrapht

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.5.1-1
1.5.1-2
1.5.1-3

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-23079.json"

Ubuntu:24.04:LTS / jgrapht

Package

Name
jgrapht
Purl
pkg:deb/ubuntu/jgrapht

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*
1.5.2-1

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-23079.json"