Lucene search
K

259 matches found

Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.14 views

RHEL 7 : json-c (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file CVE-2020-12762 Note that Nessus...

7.8CVSS7.6AI score0.01888EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.21 views

RHEL 7 : json-c,_libfastjson (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file CVE-2020-12762 Note that Nessus...

8.2AI score0.01888EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.18 views

RHEL 6 : json-c,_libfastjson (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - json-c, libfastjson: integer overflow and out-of-bounds write via a large JSON file CVE-2020-12762 Note that Nessus...

8.6AI score0.01888EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2024/03/05 6:4 p.m.1 views

libfastjson: integer overflow and out-of-bounds write via a large JSON file

A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS6.8AI score0.01888EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:0 a.m.5 views

The vulnerability of the cJSON_InsertItemInArray function in the JSON file processing library for the C JSON-C language allows a attacker to cause a service failure.

The vulnerability of the cJSONInsertItemInArray function in the JSON file processing library for the C JSON language is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures remotely...

7.8CVSS6.4AI score0.01508EPSS
Exploits1References6Affected Software2
OSV
OSV
added 2024/01/31 3:14 p.m.14 views

BIT-JSON-C-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

9.8CVSS6.1AI score0.01071EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2024/01/25 8:32 a.m.14 views

libfastjson: integer overflow and out-of-bounds write via a large JSON file

A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.8CVSS6.4AI score0.01888EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.16 views

EulerOS Virtualization 2.11.1 : json-c (EulerOS-SA-2023-3358)

According to the versions of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.23 views

EulerOS Virtualization 2.10.1 : json-c (EulerOS-SA-2023-3500)

According to the versions of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.16 views

EulerOS Virtualization 2.11.0 : json-c (EulerOS-SA-2023-3377)

According to the versions of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.13 views

EulerOS Virtualization 2.10.0 : json-c (EulerOS-SA-2023-3472)

According to the versions of the json-c package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.11 views

EulerOS 2.0 SP11 : libfastjson (EulerOS-SA-2023-2691)

According to the versions of the libfastjson package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend...

7.8CVSS6.8AI score0.01888EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.19 views

EulerOS 2.0 SP11 : libfastjson (EulerOS-SA-2023-2649)

According to the versions of the libfastjson package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend...

7.8CVSS6.8AI score0.01888EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.24 views

EulerOS 2.0 SP11 : json-c (EulerOS-SA-2023-3009)

According to the versions of the json-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.17 views

EulerOS 2.0 SP11 : json-c (EulerOS-SA-2023-3032)

According to the versions of the json-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.15 views

EulerOS 2.0 SP10 : json-c (EulerOS-SA-2023-3216)

According to the versions of the json-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.16 views

EulerOS 2.0 SP10 : json-c (EulerOS-SA-2023-3181)

According to the versions of the json-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary...

9.8CVSS7AI score0.01071EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/12 6:47 p.m.21 views

Security Bulletin: A vulnerability in json-c may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution (CVE-2020-12762).

Summary json-c is used by IBM Robotic Process Automation as part of base container images. CVE-2020-12762. Vulnerability Details CVEID:CVE-2020-12762 DESCRIPTION: json-c could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow and out-of-bounds write. B...

7.8CVSS8.3AI score0.01888EPSS
Exploits1Affected Software1
OpenVAS
OpenVAS
added 2023/12/22 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2023-3500)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01071EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/12/22 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for json-c (EulerOS-SA-2023-3472)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.01071EPSS
Exploits1References2
Rows per page
Query Builder