465 matches found
Astra Linux – Vulnerability in cjson
It has been discovered that cJSON v1.7.17 contains a segmentation violation, which can occur through the second parameter of the cJSONSetValuestring function in the cJSON.c library...
Fedora 41 : cjson (2024-82f3634c69)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-82f3634c69 advisory. Update to new upstream version closes rhbz2237124 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Fedora 41 : cjson (2024-ef33631a3c)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ef33631a3c advisory. Automatic update for cjson-1.7.17-1.fc41. Changelog Sun Apr 7 2024 Fabian Affolter - 1.7.17.-1 - Update to latest upstream version 1.7.17 closes rhbz2255953 ...
OESA-2024-2303 cjson security update
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...
OESA-2024-2302 cjson security update
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file. %package devel Summary: Development files for cJSON Requires: = - Requires: pkgconfig %description devel The cjson-devel package contains libraries and header files...
Mageia: Security Advisory (MGASA-2024-0324)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0324 Updated cjson packages fix security vulnerability
cJSON was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c. CVE-2024-31755...
Updated cjson packages fix security vulnerability
cJSON was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSONSetValuestring at cJSON.c. CVE-2024-31755...
[SECURITY] Fedora 41 Update: cjson-1.7.18-1.fc41
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file...
Fedora: Security Advisory (FEDORA-2024-5db248f2a0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 40 Update: cjson-1.7.18-1.fc40
cJSON aims to be the dumbest possible parser that you can get your job done with. It's a single file of C, and a single header file...
BIT-VALKEY-2022-24834 Heap overflow issue with the Lua cjson library used by Redis
Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...
BIT-KEYDB-2022-24834 Heap overflow issue with the Lua cjson library used by Redis
Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support,...
ROS-20240729-13
Vulnerability of cJSONInsertItemInArray function of JSON-C library for JSON-C JSON processing is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...
ROS-20240726-03
A vulnerability in the cjson and cmsgpack libraries of the Redis database management system DBMS is related to a buffer overflow in dynamic memory. buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code using a specially crafted Lua...
RHEL 8 : redis (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - redis: Code injection via Lua script execution environment CVE-2022-24735 - redis: heap overflow in the l...
cJSON before 1.7.11 allows out-of-bounds access related to \x00 in a string literal.
...
cJSON before 1.7.11 allows out-of-bounds access related to multiline comments.
...