CVE-2024-21907

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://github.com/JamesNK/Newtonsoft.Json/issues/2457", "name": "https://github.com/JamesNK/Newtonsoft.Json/issues/2457", "tags": [], "refsource": ""}, {"url": "https://github.com/JamesNK/Newtonsoft.Json/pull/2462", "name": "https://github.com/JamesNK/Newtonsoft.Json/pull/2462", "tags": [], "refsource": ""}, {"url": "https://github.com/JamesNK/Newtonsoft.Json/commit/7e77bbe1beccceac4fc7b174b53abfefac278b66", "name": "https://github.com/JamesNK/Newtonsoft.Json/commit/7e77bbe1beccceac4fc7b174b53abfefac278b66", "tags": [], "refsource": ""}, {"url": "https://alephsecurity.com/2018/10/22/StackOverflowException/", "name": "https://alephsecurity.com/2018/10/22/StackOverflowException/", "tags": [], "refsource": ""}, {"url": "https://alephsecurity.com/vulns/aleph-2018004", "name": "https://alephsecurity.com/vulns/aleph-2018004", "tags": [], "refsource": ""}, {"url": "https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678", "name": "https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678", "tags": [], "refsource": ""}, {"url": "https://github.com/advisories/GHSA-5crp-9r3c-p9vr", "name": "https://github.com/advisories/GHSA-5crp-9r3c-p9vr", "tags": [], "refsource": ""}, {"url": "https://vulncheck.com/advisories/vc-advisory-GHSA-5crp-9r3c-p9vr", "name": "https://vulncheck.com/advisories/vc-advisory-GHSA-5crp-9r3c-p9vr", "tags": [], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.\n"}]}, "problemtype": {"problemtype_data": [{"description": []}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2024-21907", "ASSIGNER": "disclosure@vulncheck.com"}}, "impact": {}, "publishedDate": "2024-01-03T16:15Z", "configurations": {"nodes": [], "CVE_data_version": "4.0"}, "lastModifiedDate": "2024-01-03T17:26Z"}