CVE-2016-4074

CVE-2016-4074 affects jq 1.5, where the jv_dump_term() function can be exploited by a crafted JSON file to cause a denial of service through stack exhaustion. Affected product: jq; root cause: parsing of a JSON file via jv_dump_term() leads to stack consumption and potential crash. The issue has ...

CVE-2015-8863

CVE-2015-8863 affects the jq JSON processor via an off-by-one error in tokenadd() within jv_parse.c, causing a heap-based buffer overflow that can crash jq or, in some advisories, allow arbitrary code execution when processing long JSON numbers. Public details indicate vulnerable versions include...