Lucene search
IBM274B8DA8E886AD10D2ABC0F17C9502879E32577228D9DECB974BCE12DF093D67HistoryDec 18, 2020 - 2:05 p.m.
Security Bulletin: IBM MQ is affected by a vulnerability in json-c (CVE-2020-12762)
2020-12-1814:05:07
www.ibm.com
16
ibm mq
json-c vulnerability
remote code execution
integer overflow
out-of-bounds write
cvss 7.8
version 9.1 lts
version 9.2 cd
version 9.2 lts
ifix
apar it33880
fixpack 9.2.0.1
upgrade to ibm mq 9.2.1
EPSS
0.001
Percentile
44.5%
Summary
An applicable vulnerability was found in the json-c library that is bundled with MQ server and native client installations.
Vulnerability Details
CVEID:CVE-2020-12762
**DESCRIPTION:**json-c could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow and out-of-bounds write. By persuading a victim to run a specially crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Base score: 7.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/182094 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM MQ | 9.1 LTS |
| IBM MQ | 9.2 CD |
| IBM MQ | 9.2 LTS |
Remediation/Fixes
IBM MQ version 9.1 LTS
IBM MQ version 9.2 LTS
IBM MQ version 9.2 CD
Workarounds and Mitigations
None
Related
redhat
redhat
(RHSA-2021:4382) Moderate: json-c security and bug fix update
2021-11-09 13:10:09
(RHSA-2024:0573) Moderate: libfastjson security update
2024-01-30 12:53:18
(RHSA-2024:1154) Moderate: libfastjson security update
2024-03-05 16:29:16
openvas
openvas
Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2020-1605)
2020-06-03 00:00:00
Fedora: Security Advisory for json-c (FEDORA-2020-7eb7eac270)
2020-05-29 00:00:00
Debian: Security Advisory (DLA-2301-1)
2020-07-31 00:00:00
nessus
nessus
RHEL 7 : json-c,_libfastjson (Unpatched Vulnerability)
2024-05-11 00:00:00
EulerOS Virtualization for ARM 64 3.0.2.0 : json-c (EulerOS-SA-2020-1985)
2020-09-08 00:00:00
SUSE SLES12 Security Update : json-c (SUSE-SU-2022:3001-1)
2022-09-03 00:00:00
redhatcve
redhatcve
CVE-2020-12762
2020-05-13 14:10:37
amazon
amazon
Medium: json-c
2020-06-23 05:59:00
Medium: json-c
2020-06-26 22:51:00
Medium: libfastjson
2023-06-05 16:39:00
mageia
mageia
Updated libfastjson packages fix security vulnerability
2023-05-06 21:19:07
Updated json-c packages fix security vulnerability
2020-05-30 00:18:57
osv
osv
Moderate: json-c security and bug fix update
2021-11-09 13:10:09
json-c - security update
2020-07-30 00:00:00
libfastjson - security update
2023-06-20 00:00:00
rocky
rocky
json-c security and bug fix update
2021-11-09 13:10:09
freebsd
freebsd
json-c -- integer overflow and out-of-bounds write via a large JSON file
2020-05-02 00:00:00
cloudfoundry
cloudfoundry
USN-4360-4: json-c vulnerability | Cloud Foundry
2020-06-24 00:00:00
USN-4360-2: json-c regression | Cloud Foundry
2020-06-24 00:00:00
USN-4360-1: json-c vulnerability | Cloud Foundry
2020-06-24 00:00:00
nvd
nvd
CVE-2020-12762
2020-05-09 18:15:11
debian
debian
[SECURITY] [DLA 2301-1] json-c security update
2020-07-30 14:43:31
[SECURITY] [DSA 4741-1] json-c security update
2020-08-05 21:21:13
[SECURITY] [DLA 2228-1] json-c security update
2020-05-31 13:48:31
altlinux
altlinux
Security fix for the ALT Linux 9 package json-c version 0.13.1-alt2
2020-07-08 00:00:00
debiancve
debiancve
CVE-2020-12762
2020-05-09 18:15:11
cvelist
cvelist
CVE-2020-12762
2020-05-09 00:00:00
almalinux
almalinux
Moderate: libfastjson security update
2023-11-14 00:00:00
Moderate: libfastjson security update
2023-11-07 00:00:00
Moderate: json-c security and bug fix update
2021-11-09 13:10:09
fedora
fedora
[SECURITY] Fedora 30 Update: json-c-0.13.1-12.fc30
2020-05-26 03:18:15
[SECURITY] Fedora 31 Update: json-c-0.13.1-12.fc31
2020-05-26 03:20:49
[SECURITY] Fedora 32 Update: json-c-0.13.1-12.fc32
2020-05-17 02:43:40
oraclelinux
oraclelinux
json-c security and bug fix update
2021-11-16 00:00:00
libfastjson security update
2023-11-17 00:00:00
libfastjson security update
2023-11-11 00:00:00
suse
suse
Security update for json-c (important)
2022-01-25 00:00:00
Security update for json-c (important)
2022-02-17 00:00:00
cve
cve
CVE-2020-12762
2020-05-09 18:15:11
gentoo
gentoo
json-c: Multiple vulnerabilities
2020-06-15 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-12762 affecting package json-c for versions less than 0.14-3
2022-10-21 20:38:56
CVE-2020-12762 affecting package json-c 0.14-3
2020-09-09 06:09:09
ubuntu
ubuntu
json-c vulnerability
2020-05-14 00:00:00
json-c vulnerability
2020-05-28 00:00:00
ibm
ibm
veracode
veracode
Arbitrary Code Execution
2020-08-06 21:35:13
prion
prion
Integer overflow
2020-05-09 18:15:00
ubuntucve
ubuntucve
CVE-2020-12762
2020-05-09 00:00:00
alpinelinux
alpinelinux
CVE-2020-12762
2020-05-09 18:15:11
photon
photon
Important Photon OS Security Update - PHSA-2020-0093
2020-05-20 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0093
2020-05-20 00:00:00
ics
ics
Siemens SINEC INS
2022-09-15 12:00:00
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
EPSS
0.001
Percentile
44.5%
Related for 274B8DA8E886AD10D2ABC0F17C9502879E32577228D9DECB974BCE12DF093D67