CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

PT-2023-4758 · Json-C +3 · Json-C +3

Name of the Vulnerable Software and Affected Versions: json-c versions 0.14 through 0.15-20200726 Description: A stack-buffer-overflow issue exists in the json parse auxiliary sample program, specifically in the parseit function. This issue is related to a buffer overflow in memory, which can be...

CVE-2021-32292

CVE-2021-32292 affects json-c: a stack-buffer-overflow in the auxiliary sample program json_parse (parseit) reported for json-c versions from 0.14 unreleased code up to 0.15-20200726. Connected documents indicate mitigations: Gentoo GLSA-202408-08 recommends upgrading to json-c-0.16 or newer. Ins...

CVE-2021-32292: Out-of-bounds Write

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

json-c 缓冲区错误漏洞

json-c is a C-based JSON parser. A buffer error vulnerability exists in json-c 0.15-20200726 and earlier versions, which stems from a buffer overflow vulnerability in the function parseit. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

Amazon Linux 2023 : json-c, json-c-devel (ALAS2023-2023-232)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-232 advisory. A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to...

Important: json-c

Issue Overview: A flaw was found in json-c. In printbufmemappend, certain crafted values can overflow the memory allowing an attacker to write past the memory boundary. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2020-127...

OESA-2023-1186 libfastjson security update

libfastjson is a fork from json-c, and is currently under development. The aim of this is not to provide a slightly modified clone of json-c. It's aim is to provide: a small library with essential json handling functions, sufficiently good json support not 100% standards compliant, be very fast i...

SUSE CVE-2013-6370

Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors...

SUSE CVE-2013-6371

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...

SUSE CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend...

NewStart CGSL MAIN 6.02 : json-c Vulnerability (NS-SA-2022-0089)

The remote NewStart CGSL host, running version MAIN 6.02, has json-c packages installed that are affected by a vulnerability: - json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbufmemappend. CVE-2020-12762 Note that Nessus has not...

SUSE: Security Advisory (SUSE-SU-2022:3001-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES12 Security Update : json-c (SUSE-SU-2022:3001-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3001-1 advisory. - CVE-2020-12762: Fixed an integer overflow that could lead to memory corruption via a large JSON file bsc1171479. Non-security fixes: -...

SUSE-SU-2022:3001-1 Security update for json-c

This update for json-c fixes the following issues: - CVE-2020-12762: Fixed an integer overflow that could lead to memory corruption via a large JSON file bsc1171479. Non-security fixes: - Updated to version 0.12.1 jscPED-1778...

Ubuntu: Security Advisory (USN-4360-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

new packages: json-c

An update is available for json-c. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...