CVE-2020-12762
גבוהה 7.8
תיאור (מקור, אנגלית)
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
מדדים
- CVSS 3.1
-
7.8 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 2% (אחוזון 100) נכון ל-21/10/2026
- CWE
- CWE-190, CWE-787
מוצרים מושפעים
json-c: json-c; fedoraproject: fedora; debian: debian linux; canonical: ubuntu linux; siemens: sinec ins
קישורים
- https://github.com/json-c/json-c/pull/592 ExploitPatchThird Party Advisory
- https://github.com/json-c/json-c/pull/592 ExploitPatchThird Party Advisory
- https://github.com/rsyslog/libfastjson/issues/161 ExploitThird Party Advisory
- https://github.com/rsyslog/libfastjson/issues/161 ExploitThird Party Advisory
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00032.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/05/msg00034.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00031.html Mailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/06/msg00023.html Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…