372 matches found
CVE-2016-4425
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JSON data...
ALPINE-CVE-2016-4074
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...
DEBIAN-CVE-2016-4074
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...
AZL-6505 CVE-2016-4074 affecting package jq for versions less than 1.5-6
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...
CVE-2016-4074
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...
UBUNTU-CVE-2016-4074
The jvdumpterm function in jq 1.5 allows remote attackers to cause a denial of service stack consumption and application crash via a crafted JSON file. This issue has been fixed in jq 1.6rc1-r0...
jq heap buffer overflow vulnerability
jq is a software developer Stephen Dolan developed a lightweight command-line JSON processor . A heap buffer overflow vulnerability exists in jq's tokenadd function, which can be exploited to cause a denial of service application crash with the help of a specially crafted JSON file...
Git jq JSON File Denial of Service Vulnerability
Git is a free, open source distributed version control system developed by American software developer Linus Torvalds. jq is a lightweight command-line JSON processor developed by software developer Stephen Dolan. Git 1.5 and earlier versions of jq have a security vulnerability that can be...
CVE-2015-5250
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service master process crash via crafted JSON data...
CVE-2015-5250
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service master process crash via crafted JSON data...
PT-2015-6816 · Red Hat · Openshift Origin
Name of the Vulnerable Software and Affected Versions: OpenShift Origin version 1.0.5 Description: The issue allows remote attackers to cause a denial of service, resulting in a master process crash, via crafted JSON data sent to the API server. Recommendations: For OpenShift Origin version 1.0.5...
Debian DLA-215-1 : libjson-ruby security update
The JSON gem for Ruby allowed remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL...
DLA-215-1 libjson-ruby - security update
Bulletin has no description...
Code injection
The NativeAppServlet in ManageEngine Desktop Central MSP before 90075 allows remote attackers to execute arbitrary code via a crafted JSON object...
Medium: json-c
Issue Overview: The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions. Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service...
json-c: hash collision DoS
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...
CVE-2013-6371
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...
CVE-2013-6371
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...
CVE-2013-6371
CVE-2013-6371 affects json-c prior to 0.12. The issue is a hash collision denial-of-service in the JSON-C hash function used during string parsing, allowing an attacker to cause high CPU/DoS with crafted JSON data. Public advisories (Red Hat RHSA-2014:0703, Oracle/OpenSUSE/NASL/ Mandriva entries,...