AZL-41390 CVE-2019-11835 affecting package libglvnd for versions less than 1.7.0-2

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

DEBIAN-CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

Cross site scripting

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11835

CVE-2019-11835 affects the cJSON library prior to 1.7.11, where parsing issues with multiline comments enable out-of-bounds access. Impact per sources: high severity (CVSS 3.1 base 9.8; NETWORK, LOW complexity, NONE privileges). Affected: cJSON before 1.7.11. Remediation: upgrade to 1.7.11 or lat...

CVE-2019-11835

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834

CVE-2019-11834 affects cJSON before 1.7.11, allowing out-of-bounds access related to a null byte in a string literal. Public documents corroborate the issue across multiple feeds; one entry ties it to libglvnd

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11834

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

CVE-2019-11835: Out-of-bounds Read

cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments...

CVE-2019-11834: Out-of-bounds Read

cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal...

PT-2019-12517 · Cjson · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions prior to 1.7.11 Description: The issue allows out-of-bounds access, related to x00 in a string literal. Recommendations: For versions prior to 1.7.11, update to version 1.7.11 or later to resolve the issue...

PT-2019-12518 · Dave Gamble · Cjson

Name of the Vulnerable Software and Affected Versions: cJSON versions prior to 1.7.11 Description: The issue allows out-of-bounds access, related to multiline comments. Recommendations: For versions prior to 1.7.11, update to version 1.7.11 or later to resolve the issue...

CVE-2016-10749

parsestring in cJSON.c in cJSON before 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character...