{"id":"CVE-2023-50572","aliases":["AZL-66918","AZL-66920","DEBIAN-CVE-2023-50572","EUVD-2023-3069","GHSA-2268-98wh-qfhf","UBUNTU-CVE-2023-50572"],"status":"published","title":"JLine vulnerable to out of memory error","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00255,"percentile":0.17227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2023-12-29T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Maven","package":"org.jline:jline-parent","fixed_in":["3.25.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jline:jline-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"jline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.14.6-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"jline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.14.6-1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jline:jline-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.25.0"}]}],"versions":["3.10.0","3.11.0","3.12.0","3.12.1","3.13.0","3.13.1","3.13.2","3.13.3","3.14.0","3.14.1","3.15.0","3.16.0","3.17.0","3.17.1","3.18.0","3.19.0","3.2.0","3.20.0","3.21.0","3.22.0","3.23.0","3.24.0","3.24.1","3.3.0","3.3.1","3.4.0","3.5.0","3.5.1","3.5.2","3.6.0","3.6.1","3.6.2","3.7.0","3.7.1","3.8.0","3.8.1","3.8.2","3.9.0"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"jline3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.1-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"jline3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.1-3","3.3.1-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"jline3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.1-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"jline3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.1-4build1","3.3.1-5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"jline3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.1-4","3.3.1-4build1"]}],"products":[{"vendor":"jline","product":"jline"}],"references":[{"url":"https://github.com/jline/jline3/issues/909","tags":["x_transferred","Exploit","Issue Tracking","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50572","tags":["web","advisory"]},{"url":"https://github.com/jline/jline3/commit/f3c60a3e6255e8e0c20d5043a4fe248446f292bb","tags":["web","report"]},{"url":"https://github.com/advisories/GHSA-2268-98wh-qfhf"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50572.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-50572","tags":["advisory"]},{"url":"https://github.com/jline/jline3","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2023-50572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50572","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-50572","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T00:00:00Z","modified":"2026-10-07T16:16:46.376Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-3069","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T00:00:00Z","modified":"2026-10-07T16:16:46Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:35.164729Z"}],"ghsa":[{"id":"GHSA-2268-98wh-qfhf","title":"JLine vulnerable to out of memory error","description":"An issue in the component `GroovyEngine.execute` of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.","status":"published","published":"2023-12-29T15:30:37Z","modified":"2024-01-05T19:49:51Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:37:30.183224Z"}],"nvd":[{"id":"CVE-2023-50572","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T15:15:10.03Z","modified":"2026-10-07T17:16:44.497Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:08:59.830468Z"}],"osv":[{"id":"AZL-66918","title":"CVE-2023-50572 affecting package jline 2.14.6-1","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T15:15:10Z","modified":"2026-04-21T04:38:01.116774Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66920","title":"CVE-2023-50572 affecting package jline 2.14.6-1","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T15:15:10Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:23.841127Z"},{"id":"CVE-2023-50572","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T00:00:00Z","modified":"2026-10-28T02:30:40.584512252Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-50572","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"withdrawn","published":"2023-12-29T15:15:10.03Z","modified":"2026-06-12T02:01:35.473360223Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"GHSA-2268-98wh-qfhf","title":"JLine vulnerable to out of memory error","description":"An issue in the component `GroovyEngine.execute` of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.","status":"published","published":"2023-12-29T15:30:37Z","modified":"2024-02-16T08:07:52.686694Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:46:33.520522Z"},{"id":"UBUNTU-CVE-2023-50572","description":"An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.","status":"published","published":"2023-12-29T15:15:00Z","modified":"2026-10-17T12:57:21.713614266Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"}]}}