573 matches found
CVE-2023-26819
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...
CVE-2023-26819
CVE-2023-26819 affects the cJSON library (v1.7.15) and can cause a denial of service when parsing crafted JSON like {"a": true, "b": [null, 9999...}] with extremely large numbers. Public advisories (Ubuntu USN-7973-1; Debian DLA-4216) confirm vulnerable package versions and provide fixes in subse...
cJSON 安全漏洞
cJSON is a lightweight, open source JSON parser from the individual developer Dave Gamble. A security vulnerability exists in cJSON version 1.7.15, which stems from a denial of service that can be caused when processing specially crafted JSON documents...
CVE-2023-26819
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...
PT-2025-17394
Name of the Vulnerable Software and Affected Versions cJSON version 1.7.15 Description The issue might allow a denial of service via a crafted JSON document. For example, a document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567 could be used...
CVE-2023-26819
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...
CVE-2023-26819: Expected Behavior Violation
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...
CVE-2023-26819
cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as "a": true, "b": null,9999999999999999999999999999999999999999999999912345678901234567...
The vulnerability of the cJSON_SetValuestring function in the cJSON.c library for working with JSON objects in C language allows a attacker to cause a service denial.
The vulnerability of the cJSONSetValuestring function in the cJSON.c library for working with JSON objects in C is related to pointer dereferencing errors involving NULL. Exploiting this vulnerability could allow an attacker to cause a service failure...
redis: heap overflow in the lua cjson and cmsgpack libraries
A heap-based buffer overflow flaw was found in Redis. This flaw allows a local authenticated attacker user or attacker to execute a specially crafted Lua script in Redis. This attack triggers a heap overflow in the cjson and cmsgpack libraries, resulting in heap corruption and potential remote co...
redis: heap overflow in the lua cjson and cmsgpack libraries
A heap-based buffer overflow flaw was found in Redis. This flaw allows a local authenticated attacker user or attacker to execute a specially crafted Lua script in Redis. This attack triggers a heap overflow in the cjson and cmsgpack libraries, resulting in heap corruption and potential remote co...
Debian dla-3700 : libcjson-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3700 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3700-1 [email protected] https://www.debian.org/lts/security/...
Fedora 41 : cjson (2024-82f3634c69)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-82f3634c69 advisory. Update to new upstream version closes rhbz2237124 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Fedora 41 : cjson (2024-ef33631a3c)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ef33631a3c advisory. Automatic update for cjson-1.7.17-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.7.17.-1 - Update to latest upstream version 1.7.17 closes rhbz2255953 ...
OESA-2024-2303 cjson security update
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...
OESA-2024-2302 cjson security update
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...
Mageia: Security Advisory (MGASA-2024-0324)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0324 Updated cjson packages fix security vulnerability
cJSON was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c. CVE-2024-31755...
Updated cjson packages fix security vulnerability
cJSON was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c. CVE-2024-31755...
