UbuntuUSN-2245-1json-c vulnerabilities
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.9%
Releases
- Ubuntu 14.04 ESM
- Ubuntu 13.10
- Ubuntu 12.04
Packages
- json-c - JSON manipulation library
Details
Florian Weimer discovered that json-c incorrectly handled buffer lengths.
An attacker could use this issue with a specially-crafted large JSON
document to cause json-c to crash, resulting in a denial of service.
(CVE-2013-6370)
Florian Weimer discovered that json-c incorrectly handled hash arrays. An
attacker could use this issue with a specially-crafted JSON document to
cause json-c to consume CPU resources, resulting in a denial of service.
(CVE-2013-6371)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 14.04 | noarch | libjson0 | < 0.11-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libjson-c-dev | < 0.11-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libjson-c2 | < 0.11-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libjson-c2-dbg | < 0.11-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 14.04 | noarch | libjson0-dev | < 0.11-3ubuntu1.2 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libjson0 | < 0.11-2ubuntu1.2 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libjson-c-dev | < 0.11-2ubuntu1.2 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libjson-c2 | < 0.11-2ubuntu1.2 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libjson-c2-dbg | < 0.11-2ubuntu1.2 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libjson0-dev | < 0.11-2ubuntu1.2 | UNKNOWN |
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.013 Low
EPSS
Percentile
85.9%