cve/2024/CVE-2024-21907.md

### [CVE-2024-21907](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21907)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-755%20Improper%20Handling%20of%20Exceptional%20Conditions&color=brighgreen)

### Description

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.

### POC

#### Reference
- https://alephsecurity.com/vulns/aleph-2018004
- https://alephsecurity.com/vulns/aleph-2018004
- https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678
- https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678

#### Github
- https://github.com/aargenveldt/SbomTest
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`### [CVE-2024-21907](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-21907)`
			`![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)`
			`![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-755%20Improper%20Handling%20of%20Exceptional%20Conditions&color=brighgreen)`

			`### Description`

			`Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.`

			`### POC`

			`#### Reference`
			`- https://alephsecurity.com/vulns/aleph-2018004`
Update CVE sources 2024-06-09 00:33 2024-06-09 00:33:16 +00:00			`- https://alephsecurity.com/vulns/aleph-2018004`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`- https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678`
Update CVE sources 2024-06-09 00:33 2024-06-09 00:33:16 +00:00			`- https://security.snyk.io/vuln/SNYK-DOTNET-NEWTONSOFTJSON-2774678`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00
			`#### Github`
			`- https://github.com/aargenveldt/SbomTest`