Lucene search

K
redhatcveRedhat.comRH:CVE-2021-32292
HistoryAug 30, 2023 - 12:45 p.m.

CVE-2021-32292

2023-08-3012:45:22
redhat.com
access.redhat.com
64
cve-2021-32292
json-c library
code error
test app

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.0%

A flaw was found in the parseit() function in json_parse.c., a test app in the json-c library. The code error does not affect the library itself.

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

52.0%