Lucene search
K

135 matches found

Github Security Blog
Github Security Blog
added 2022/01/21 11:27 p.m.45 views

UltraJSON vulnerable to Out-of-bounds Write

UltraJSON aka ujson 1.34 through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode...

5.5CVSS3.8AI score0.01557EPSS
Exploits1References14Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/01 12:15 a.m.4 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.7AI score0.01557EPSS
Exploits1References15
NVD
NVD
added 2022/01/01 12:15 a.m.15 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS0.01557EPSS
Exploits1References10
OSV
OSV
added 2022/01/01 12:15 a.m.24 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS7.2AI score
Exploits0References10
OSV
OSV
added 2022/01/01 12:15 a.m.2 views

DEBIAN-CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.7AI score0.01557EPSS
Exploits1References1
Prion
Prion
added 2022/01/01 12:15 a.m.15 views

Stack overflow

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

4.3CVSS5.8AI score0.01557EPSS
Exploits1References10Affected Software3
OSV
OSV
added 2022/01/01 12:15 a.m.71 views

PYSEC-2022-25

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS3.4AI score0.01557EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2022/01/01 12:15 a.m.26 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.01557EPSS
Exploits1References5
OSV
OSV
added 2022/01/01 12:15 a.m.1 views

UBUNTU-CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.01557EPSS
Exploits1References6
CNNVD
CNNVD
added 2022/01/01 12:0 a.m.11 views

UltraJSON 缓冲区错误漏洞

UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A buffer error vulnerability exists in UltraJSON a.k.a. ujson 4.0.2 through 5.0.0, which stems from having a stack-based buffer overflow in BufferAppendIndentUnchecked from an encoding...

5.5CVSS6.7AI score0.01557EPSS
Exploits1References15
Cvelist
Cvelist
added 2021/12/31 11:52 p.m.30 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

6.3AI score0.01557EPSS
Exploits1References10
AlpineLinux
AlpineLinux
added 2021/12/31 11:52 p.m.26 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.1AI score0.01557EPSS
Exploits1
Debian CVE
Debian CVE
added 2021/12/31 11:52 p.m.28 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.1AI score0.01557EPSS
Exploits1
CVE
CVE
added 2021/12/31 11:52 p.m.177 views

CVE-2021-45958

CVE-2021-45958 affects UltraJSON (ujson) up to version 5.1.0, with a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation could crash the application by using excessive indentation. Publicly documented references include Debian LTS (DLA-2929-1) and Mageia...

5.5CVSS5.8AI score0.01557EPSS
Exploits1References10Affected Software1
vulnersOsv
vulnersOsv
added 2021/07/11 12:1 a.m.1 views

muffin (>=0.5.3 <=0.5.12) potentially affected by unknown CVE via ujson (=1.34.0)

ujson PYPI version =1.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on ujson and may be impacted: - muffin =0.5.3, =0.5.12 Source cves: unknown CVE Source advisory: OSV:OSV-2021-955...

5.5AI score
Exploits0
Rows per page
Query Builder