poco:json_parser_fuzzer: Use-of-uninitialized-value in Poco::Dynamic::Var::~Var

Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=5662436329127936 Project: poco Fuzzing Engine: libFuzzer Fuzz Target: jsonparserfuzzer Job Type: libfuzzermsanpoco Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

PT-2023-7988 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: A specially crafted string can cause a buffer overrun in the JSON parser library, leading to a crash of the Zabbix Server or a Zabbix Proxy. This issue can be exploited by a remote attacker ...

K13323323: iRules LX vulnerability CVE-2021-22973

Security Advisory Description JSON parser function does not protect against out-of-bounds memory accesses or writes. CVE-2021-22973 Impact The Traffic Management Microkernel TMM may exit and restart while processing JSON payload with iRules LX commands, leading to a failover event. Security...

CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

UBUNTU-CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

Buffer overflow

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

PT-2023-18840 · Unknown · Barenboim Json-Parser

Name of the Vulnerable Software and Affected Versions: Barenboim json-parser versions 1.1.0 and earlier Description: The issue allows an attacker to execute arbitrary code via the json value parse function. This is a result of a Buffer OverFlow Vulnerability in the Barenboim json-parser...

CVE-2023-23088

The vulnerability CVE-2023-23088 affects Barenboim’s json-parser (master and v1.1.0; fix released in v1.1.1). The flaw is a buffer overflow in json_value_parse that enables arbitrary code execution. Public details in connected sources confirm the affected component and patch version; no exploit c...

json-parser buffer error vulnerability

json-parser is a standard JSON parser in C by xiehan personal developer. A security vulnerability exists in Barenboim json-parser version v1.1.0, which can be exploited by an attacker to execute arbitrary code via the jsonvalueparse function...

CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

CVE-2023-23088: Out-of-bounds Write

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

CVE-2023-23088

Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the jsonvalueparse function...

[SECURITY] [DSA 5312-1] libjettison-java security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5312-1 [email protected] https://www.debian.org/security/ Markus Koschany January 11, 2023 https://www.debian.org/security/faq -...

jsonpath:PathParserFuzzer: Security exception in net.minidev.json.parser.JSONParserBase.readArray

Project: https://github.com/json-path/JsonPath.git Detailed Report: https://oss-fuzz.com/testcase?key=5093293811957760 Project: jsonpath Fuzzing Engine: libFuzzer Fuzz Target: PathParserFuzzer Job Type: libfuzzerasanjsonpath Platform Id: linux Crash Type: Security exception Crash Address: Crash...

json-smart: Denial of Service in JSONParserByteArray function

A flaw was found in the json-smart package in the JSONParserByteArray. This flaw allows an attacker to cause a denial of service...

yajl security update

An update is available for yajl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser...

Moderate: yajl security update

Yet Another JSON Library YAJL is a small event-driven SAX-style JSON parser written in ANSI C, and a small validating JSON generator. Security Fixes: yajl: heap-based buffer overflow when handling large inputs due to an integer overflow CVE-2022-24795 For more details about the security issues,...