Linux Distros Unpatched Vulnerability : CVE-2023-26819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as a: true, b:...

Linux Distros Unpatched Vulnerability : CVE-2023-53154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - parsestring in cJSON before 1.7.18 has a heap-based buffer over-read via 1:1, with no trailing newline if cJSONParseWithLength is called. CVE-2023-53154 Note th...

The vulnerability of the cJSON.c component in the JSON-object handling library for C allows a attacker to cause a service failure.

The vulnerability of the cJSON.c component in the JSON-object handling library for C is related to a violation of expected behavior. Exploiting this vulnerability can allow an attacker to cause a service failure...

OESA-2025-1993 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...

OESA-2025-1995 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...

OESA-2025-1992 cjson security update

cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...

Linux Distros Unpatched Vulnerability : CVE-2022-24834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and...

cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b": [ null,9999999999999999999999999999999999999999999999912345678901234567]}.

...

Advisory ROSA-SA-2025-2952

software: cjson 1.7.18 WASP: ROSA-CHROME unaffected versions = cjson-1.7.18-1 affected versions cjson-1.7.18-1 CVE-ID: CVE-2023-53154 BDU-ID: None CVE-Crit: LOW CVE-DESC.: cJSON: Buffer overflow vulnerability on read from heap via parsestring function. CVE-STATUS: Vulnerability has been resolved...

cjson: segmentation violation in function cJSON_InsertItemInArray

A flaw was discovered in the cJSON package. Certain input conditions may trigger a null pointer dereference, which can lead to a denial of service...

cjson: segmentation violation in function cJSON_SetValuestring

A flaw was discovered in the cJSON package. Certain input conditions may trigger a null pointer dereference, which can lead to a denial of service...

cjson: segmentation violation trigger through the second parameter of function cJSON_SetValuestring at cJSON.c

A flaw was found in cJSON. This issue contains a segmentation violation, which can trigger through the second parameter of the cJSONSetValuestring function at cJSON.c...

Debian: Security Advisory (DLA-4216-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TencentOS Server 4: cjson (TSSA-2024:0945)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0945 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 4: cjson (TSSA-2024:0946)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0946 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

[SECURITY] [DLA 4216-1] cjson security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4216-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 15, 2025 https://wiki.debian.org/LTS -...

DLA-4216-1 cjson - security update

Bulletin has no description...

Debian dla-4216 : libcjson-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4216 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4216-1 [email protected]...

cjson: segmentation violation trigger through the second parameter of function cJSON_SetValuestring at cJSON.c

A flaw was found in cJSON. This issue contains a segmentation violation, which can trigger through the second parameter of the cJSONSetValuestring function at cJSON.c...

RHEL 9 : Satellite 6.17.1 Async Update (Moderate) (RHSA-2025:9022)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:9022 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide...