← Back

CVE-2024-22871

nvd nist
Published: Feb 29, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure.core$partial$fn__5920 function.

Affected (12)

Clojure
1 product
Clojure
Fedoraproject
1 product
Fedora
Configuration A
9 vulnerable
Vulnerable SoftwareAffected Versions
Clojure
Clojure
From 1.2.0 to 1.11.2
Clojure
Version 1.12.0 alpha1
Clojure
Version 1.12.0 alpha2
Clojure
Version 1.12.0 alpha3
Clojure
Version 1.12.0 alpha4
Clojure
Version 1.12.0 alpha5
Clojure
Version 1.12.0 alpha6
Clojure
Version 1.12.0 alpha7
Clojure
Version 1.12.0 alpha8
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 38
Fedora
Version 39
Fedora
Version 40

Related CWEs

CWE-502
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (11)

Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.