Lucene search
+L

91 matches found

CNVD
CNVD
added 2021/04/27 12:00 a.m.22 views

Jansson Out-of-Bounds Memory Read Vulnerability

Jansson is a C library for encoding, decoding and manipulating JSON data. An out-of-bounds memory read vulnerability exists in Jansson 2.13.1 and earlier versions. The vulnerability stems from a parsing error in jsonloads. No details of the vulnerability are provided at this time...

7.5CVSS6.6AI score0.01718EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/26 6:15 p.m.3 views

DEBIAN-CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.8AI score0.01718EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/26 6:15 p.m.10 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.3AI score
SaveExploits0References1
OSV
OSV
added 2021/04/26 6:15 p.m.6 views

ALPINE-CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7AI score0.01718EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/26 6:15 p.m.16 views

AZL-6490 CVE-2020-36325 affecting package jansson for versions less than 2.14-1

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.2AI score0.01718EPSS
SaveExploits1References1
NVD
NVD
added 2021/04/26 6:15 p.m.26 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS0.01718EPSS
SaveExploits1References1
Prion
Prion
added 2021/04/26 6:15 p.m.21 views

Design/Logic Flaw

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

5CVSS7.3AI score0.01718EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2021/04/26 6:15 p.m.13 views

UBUNTU-CVE-2020-36325

DISPUTED An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.1AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/04/26 6:15 p.m.36 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.1AI score0.01718EPSS
SaveExploits1References2
CVE
CVE
added 2021/04/26 5:05 p.m.226 views

CVE-2020-36325

CVE-2020-36325 affects the Jansson JSON library (up to and including 2.13.1). The issue is a parsing error in json_loads that allows an out-of-bounds read-access. Several connected sources specify that an upgrade is needed: Debian Docker/DLA entries and Mariner notes indicate vulnerability exists...

7.5CVSS7.4AI score0.01718EPSS
SaveExploits1References1Affected Software1
Debian CVE
Debian CVE
added 2021/04/26 5:05 p.m.66 views

CVE-2020-36325

Removed by vendor...

7.5CVSS7.2AI score0.01718EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/04/26 5:05 p.m.43 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.4AI score0.01718EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
added 2021/04/26 5:05 p.m.81 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.5AI score0.01718EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/04/26 12:00 a.m.9 views

jansson 缓冲区错误漏洞

Jansson is a C library for encoding, decoding and manipulating JSON data. An out-of-bounds memory read vulnerability exists in Jansson 2.13.1 and earlier versions. The vulnerability stems from a parsing error in jsonloads. No details of the vulnerability are provided at this time...

7.5CVSS5.5AI score0.01718EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/04/26 12:00 a.m.7 views

PT-2021-12008 · Jansson +1 · Jansson +1

Name of the Vulnerable Software and Affected Versions: Jansson versions through 2.13.1 Description: An issue was discovered due to a parsing error in json loads, resulting in an out-of-bounds read-access bug. This issue only occurs when a programmer fails to follow the API specification...

7.5CVSS9.5AI score0.01718EPSS
SaveExploits1References13
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.13 views

Huawei EulerOS: Security Advisory for jansson (EulerOS-SA-2019-2396)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.01894EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.19 views

Huawei EulerOS: Security Advisory for jansson (EulerOS-SA-2019-2597)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.5AI score0.01894EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/18 12:00 a.m.28 views

EulerOS 2.0 SP3 : jansson (EulerOS-SA-2019-2597)

According to the version of the jansson package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JS...

7.5CVSS7.2AI score0.01894EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/10 12:00 a.m.28 views

EulerOS 2.0 SP2 : jansson (EulerOS-SA-2019-2396)

According to the version of the jansson package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service deep recursion, stack consumption, and crash via crafted JS...

7.5CVSS7.2AI score0.01894EPSS
SaveExploits0References2
Veracode
Veracode
added 2017/02/01 5:44 a.m.18 views

Denial Of Service (DoS)

Jansson is vulnerable to denial of service DoS attacks. These attacks are possible though JSON data, causing deep recursion, stack consumption and eventually crashing the application...

7.5CVSS7.1AI score0.01894EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder