Fedora: Security Advisory for golang-github-buger-jsonparser (FEDORA-2020-39852a8ef8)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : golang-github-buger-jsonparser (2020-97e8a67945)

Multiple bug fixes, including a fix for CVE-2020-10675 . Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

CVE-2020-10675

CVE-2020-10675 affects the Go library github.com/buger/jsonparser: the Library API could enter an infinite loop on certain Delete calls, causing a denial-of-service. Root cause: parsing malformed or crafted input triggering unbounded looping. Documented in multiple advisories (OSV GHSA, GHSA-RMH2...

CVE-2020-10675

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...