CyberRota Analysis
AI-GeneratedThe Ion reader in Amazon Ion Python prior to version 0.15.0 is vulnerable to uncontrolled recursion, which can be exploited by remote unauthenticated attackers to crash applications that utilize the library, leading to a denial of service. Organizations using this library should prioritize upgrading to version 0.15.0 or later to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version 0.15.0 or later.