Skip to content

Instantly share code, notes, and snippets.

@LLM4IG

LLM4IG/gist:d2618f5f4e5ac37eb75cff5617e58b90

Created April 8, 2024 15:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save LLM4IG/d2618f5f4e5ac37eb75cff5617e58b90 to your computer and use it in GitHub Desktop.
Save LLM4IG/d2618f5f4e5ac37eb75cff5617e58b90 to your computer and use it in GitHub Desktop.
Download ZIP
[CVE-2024-23082]
Raw
gistfile1.txt
[CVE ID]
CVE-2024-23082
[PRODUCT]
ThreeTen Backport
[VERSION]
v1.6.8
[PROBLEM TYPE]
Integer Overflow - StringIndexOutOfBoundsException
[DESCRIPTION]
In method "org.threeten.bp.format.DateTimeFormatter::parse(CharSequence, ParsePosition)", if the parameter text is an empty string, the index of the parameter position is 10 and the errorIndex is 10, then a StringIndexOutOfBoundsException is thrown.
@jamesrgrinter
Copy link

this is garbage. A run-time Exception does not automatically make a valid CVE.

@roman-vynar
Copy link

Yea, 🤡

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment