Dave Gamble cJSON Double Release Vulnerability

🗓️ 21 Aug 2018 00:00:00Reported by China National Vulnerability DatabaseType

The cJSON double release flaw in v1.7.2 and earlier enables denial of service or remote execution.

Reporter	Title	Published	Views	Family All 12
CBLMariner	CVE-2018-1000216 affecting package libglvnd for versions less than 1.7.0-2	22 Apr 202521:14	–	cbl_mariner
CVE	CVE-2018-1000216	20 Aug 201820:00	–	cve
Cvelist	CVE-2018-1000216	20 Aug 201820:00	–	cvelist
Debian CVE	CVE-2018-1000216	20 Aug 201820:00	–	debiancve
EUVD	EUVD-2018-1886	7 Oct 202500:30	–	euvd
Microsoft CVE	Dave Gamble cJSON version 1.7.2 and earlier contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, depending on how cJSON library is used this could be either local or over a network. This vulnerability appears to have been fixed in 1.7.3.	4 Sep 202503:53	–	mscve
NVD	CVE-2018-1000216	20 Aug 201820:29	–	nvd
OSV	AZL-41848 CVE-2018-1000216 affecting package libglvnd for versions less than 1.7.0-2	20 Aug 201820:29	–	osv
Prion	Double free	20 Aug 201820:29	–	prion
Positive Technologies	PT-2018-9384 · Dave Gamble · Cjson	20 Aug 201800:00	–	ptsecurity