תיאור (מקור, אנגלית)
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
מוצרים מושפעים
json-c: json-c; fedoraproject: fedora; debian: debian linux; canonical: ubuntu linux; siemens: sinec ins
קישורים10
- github.com/json-c/json-c/pull/592 ExploitPatchThird Party Advisory
- github.com/json-c/json-c/pull/592 ExploitPatchThird Party Advisory
- github.com/rsyslog/libfastjson/issues/161 ExploitThird Party Advisory
- github.com/rsyslog/libfastjson/issues/161 ExploitThird Party Advisory
- cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf Third Party Advisory
- lists.debian.org/debian-lts-announce/2020/05/msg00032.html Mailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/05/msg00034.html Mailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/07/msg00031.html Mailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2023/06/msg00023.html Third Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists…
מדדים
- CVSS 3.1
-
7.8
HIGH
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 2% אחוזון 80 · נכון ל-2 בנובמבר 2026
- CWE
- CWE-190CWE-787