Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202408-08
HistoryAug 07, 2024 - 12:00 a.m.

json-c: Buffer Overflow

2024-08-0700:00:00
Gentoo Foundation
security.gentoo.org
1
json-c
buffer overflow
parseit
cve
stack-buffer-overflow
upgrade
dev-libs
json-c-0.16
json implementation
c
sample program

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

52.0%

JSON

Background

json-c is a JSON implementation in C.

Description

Please review the CVE identifier referenced below for details.

Impact

A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

Workaround

There is no known workaround at this time.

Resolution

All json-c users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=dev-libs/json-c-0.16"
OSVersionArchitecturePackageVersionFilename
Gentooanyalldev-libs/json-c< 0.16UNKNOWN

Related

alpinelinux 1
nessus 12
openvas 10
cvelist 1
redhatcve 1
cloudfoundry 1
prion 1
osv 4
cve 1
ubuntu 1
veracode 1
cbl_mariner 1
debiancve 1
ubuntucve 1
debian 1
nvd 1
photon 1
ics 1
alpinelinux
alpinelinux
CVE-2021-32292
2023-08-22 19:16:00
nessus
nessus
EulerOS 2.0 SP11 : json-c (EulerOS-SA-2023-3009)
2024-01-16 00:00:00
EulerOS Virtualization 2.10.1 : json-c (EulerOS-SA-2023-3500)
2024-01-16 00:00:00
EulerOS 2.0 SP11 : json-c (EulerOS-SA-2023-3032)
2024-01-16 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5486-1)
2023-08-31 00:00:00
Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2023-3377)
2023-12-14 00:00:00
Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2023-3472)
2023-12-22 00:00:00
cvelist
cvelist
CVE-2021-32292
2023-08-22 00:00:00
redhatcve
redhatcve
CVE-2021-32292
2023-08-30 12:45:22
cloudfoundry
cloudfoundry
USN-6310-1: json-c vulnerability | Cloud Foundry
2023-10-05 00:00:00
prion
prion
Stack overflow
2023-08-22 19:16:00
osv
osv
CVE-2021-32292
2023-08-22 19:16:20
json-c vulnerability
2023-08-28 19:18:41
json-c - security update
2023-08-30 00:00:00
cve
cve
CVE-2021-32292
2023-08-22 19:16:20
ubuntu
ubuntu
json-c vulnerability
2023-08-28 00:00:00
veracode
veracode
Stack Buffer Overflow
2023-10-11 19:39:21
cbl_mariner
cbl_mariner
CVE-2021-32292 affecting package json-c for versions less than 0.15-2
2023-09-13 02:10:38
debiancve
debiancve
CVE-2021-32292
2023-08-22 19:16:20
ubuntucve
ubuntucve
CVE-2021-32292
2023-08-22 00:00:00
debian
debian
[SECURITY] [DSA 5486-1] json-c security update
2023-08-30 17:58:52
nvd
nvd
CVE-2021-32292
2023-08-22 19:16:20
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0462
2023-08-30 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

52.0%

JSON
Related for GLSA-202408-08
alpinelinux1nessus12openvas10cvelist1redhatcve1cloudfoundry1prion1osv4cve1ubuntu1veracode1cbl_mariner1debiancve1ubuntucve1debian1nvd1photon1ics1