Lucene search
+L

187 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/05 12:00 a.m.•4 views

CVE-2022-31117: Double Free

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...

5.9CVSS6.2AI score0.01876EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/05 12:00 a.m.•42 views

UltraJSON 资源管理错误漏洞

UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A resource management error vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an error when reallocating a buffer for string decoding, which could cause th...

5.9CVSS6.8AI score0.01876EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/07/05 12:00 a.m.•15 views

PT-2022-3515

Name of the Vulnerable Software and Affected Versions UltraJSON versions prior to 5.4.0 Description The issue is related to the improper decoding of certain characters in JSON strings, specifically escaped surrogate characters not part of a proper surrogate pair. This can lead to string corruptio...

9.4CVSS6.8AI score0.02545EPSS
SaveExploits1References49
Positive Technologies
Positive Technologies
•added 2022/07/05 12:00 a.m.•11 views

PT-2022-20540

Name of the Vulnerable Software and Affected Versions UltraJSON versions prior to 5.4.0 Description The issue occurs when an error happens while reallocating a buffer for string decoding, causing the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...

7.5CVSS7AI score0.02545EPSS
SaveExploits2References47
Mageia
Mageia
•added 2022/05/12 10:24 a.m.•59 views

Updated python-ujson packages fix security vulnerability

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation. CVE-2021-45958...

5.5CVSS6.9AI score0.0155EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2022/05/08 12:00 a.m.•25 views

Fedora: Security Advisory for python-ujson (FEDORA-2022-569b6b45e2)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.6AI score0.0155EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/05/07 5:01 a.m.•44 views

[SECURITY] Fedora 36 Update: python-ujson-5.2.0-1.fc36

UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...

5.5CVSS6.6AI score0.0155EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2022/03/27 12:00 a.m.•31 views

Fedora: Security Advisory for python-ujson (FEDORA-2022-dbf6e00ba8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.6AI score0.0155EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/03/26 3:43 p.m.•40 views

[SECURITY] Fedora 36 Update: python-ujson-5.1.0-1.fc36

UltraJSON is an ultra fast JSON encoder and decoder written in pure C with bindings for Python...

5.5CVSS6.6AI score0.0155EPSS
SaveExploits1
Veracode
Veracode
•added 2022/02/14 3:42 a.m.•34 views

Denial Of Service (DoS)

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References15Affected Software1
Github Security Blog
Github Security Blog
•added 2022/01/21 11:27 p.m.•59 views

UltraJSON vulnerable to Out-of-bounds Write

UltraJSON aka ujson 1.34 through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References14Affected Software1
osv_ghsa
osv_ghsa
•added 2022/01/21 11:27 p.m.•44 views

GHSA-FH56-85CW-5PQ6 UltraJSON vulnerable to Out-of-bounds Write

UltraJSON aka ujson 1.34 through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode...

6.8CVSS6.8AI score0.0155EPSS
SaveExploits1References15
osv_cve
osv_cve
•added 2022/01/01 12:15 a.m.•36 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS7.2AI score
SaveExploits0References10
NVD
NVD
•added 2022/01/01 12:15 a.m.•29 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS0.0155EPSS
SaveExploits1References10
attackerkb
attackerkb
•added 2022/01/01 12:15 a.m.•16 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References15
osv_debian
osv_debian
•added 2022/01/01 12:15 a.m.•11 views

DEBIAN-CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/01 12:15 a.m.•23 views

Stack overflow

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

4.3CVSS5.8AI score0.0155EPSS
SaveExploits1References10Affected Software3
UbuntuCve
UbuntuCve
•added 2022/01/01 12:15 a.m.•32 views

CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References5
osv_ubuntu
osv_ubuntu
•added 2022/01/01 12:15 a.m.•10 views

UBUNTU-CVE-2021-45958

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References6
osv_pysec
osv_pysec
•added 2022/01/01 12:15 a.m.•92 views

PYSEC-2022-25

UltraJSON aka ujson through 5.1.0 has a stack-based buffer overflow in BufferAppendIndentUnchecked called from encode. Exploitation can, for example, use a large amount of indentation...

5.5CVSS6.8AI score0.0155EPSS
SaveExploits1References5
Rows per page
Query Builder