An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jettison | Jettison_project | * | 1.5.4 (excluding) |
| Migration Toolkit for Runtimes 1 on RHEL 8 | RedHat | mtr/mtr-web-container-rhel8:1.2-9 | * |
| MTA-6.2-RHEL-8 | RedHat | mta/mta-rhel8-operator:6.2.2-3 | * |
| MTA-6.2-RHEL-9 | RedHat | mta/mta-hub-rhel9:6.2.2-2 | * |
| MTA-6.2-RHEL-9 | RedHat | mta/mta-operator-bundle:6.2.2-5 | * |
| MTA-6.2-RHEL-9 | RedHat | mta/mta-pathfinder-rhel9:6.2.2-2 | * |
| MTA-6.2-RHEL-9 | RedHat | mta/mta-ui-rhel9:6.2.2-2 | * |
| MTA-6.2-RHEL-9 | RedHat | mta/mta-windup-addon-rhel9:6.2.2-3 | * |
| OCP-Tools-4.13-RHEL-8 | RedHat | jenkins-2-plugins-0:4.13.1686680473-1.el8 | * |
| OpenShift Developer Tools and Services for OCP 4.11 | RedHat | jenkins-2-plugins-0:4.11.1686831822-1.el8 | * |
| Red Hat JBoss Enterprise Application Platform 7.1.0 | RedHat | jettison | * |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | RedHat | eap7-jettison-0:1.5.4-1.redhat_00002.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | RedHat | eap7-jettison-0:1.5.4-1.redhat_00002.1.el9eap | * |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | RedHat | eap7-jettison-0:1.5.4-1.redhat_00002.1.el7eap | * |
| Red Hat Single Sign-On 7.6.5 | RedHat | jettison | * |
| Red Hat Single Sign-On 7.6 for RHEL 7 | RedHat | rh-sso7-keycloak-0:18.0.9-1.redhat_00001.1.el7sso | * |
| Red Hat Single Sign-On 7.6 for RHEL 8 | RedHat | rh-sso7-keycloak-0:18.0.9-1.redhat_00001.1.el8sso | * |
| Red Hat Single Sign-On 7.6 for RHEL 9 | RedHat | rh-sso7-keycloak-0:18.0.9-1.redhat_00001.1.el9sso | * |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso76-openshift-rhel8:7.6-27 | * |
| RHINT Camel-Q 2.13.3 | RedHat | jettison | * |
| RHINT Camel-Springboot 3.18.3.P2 | RedHat | * | |
| RHINT Camel-Springboot 3.20.1 | RedHat | jettison | * |
| Libjettison-java | Ubuntu | bionic | * |
| Libjettison-java | Ubuntu | esm-apps/bionic | * |
| Libjettison-java | Ubuntu | esm-apps/focal | * |
| Libjettison-java | Ubuntu | esm-apps/jammy | * |
| Libjettison-java | Ubuntu | esm-apps/xenial | * |
| Libjettison-java | Ubuntu | focal | * |
| Libjettison-java | Ubuntu | jammy | * |
| Libjettison-java | Ubuntu | kinetic | * |
| Libjettison-java | Ubuntu | lunar | * |
| Libjettison-java | Ubuntu | mantic | * |
| Libjettison-java | Ubuntu | trusty | * |
| Libjettison-java | Ubuntu | xenial | * |