CVE-2023-34616

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jun 14, 2023
Updated: Jan 3, 2025
CWE ID 787

Summary

CVE-2023-34616 is a denial-of-service vulnerability affecting pbjson versions up to 0.4.0. Maliciously crafted objects with cyclic dependencies can trigger this issue, leading to unspecified impacts beyond just a denial-of-service condition. Attackers can exploit this flaw to cause significant disruption to pbjson users. The exact nature and severity of the impact are yet to be fully understood, but it is recommended that users upgrade to the latest version of pbjson to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share