Integer Underflow

🗓️ 09 Jul 2024 00:00:00Reported by Snyk Security DatabaseType

Integer underflow in RapidJSON ParseNumber during stream JSON parsing allows privilege elevation.

Reporter	Title	Published	Views	Family All 67
Tenable Nessus	Amazon Linux 2023 : rapidjson-devel (ALAS2023-2024-684)	6 Aug 202400:00	–	nessus
Tenable Nessus	Fedora 41 : rapidjson (2024-5e0da8577a)	14 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 39 : rapidjson (2024-a3c1b2629e)	25 Jul 202400:00	–	nessus
Tenable Nessus	Fedora 40 : rapidjson (2024-fb1e912d0e)	25 Jul 202400:00	–	nessus
Tenable Nessus	KB5040427: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040430: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040431: Windows 11 version 21H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040434: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040437: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus
Tenable Nessus	KB5040438: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (July 2024)	9 Jul 202400:00	–	nessus

Vulners

Node

Source	Link
security	www.security.snyk.io/vuln/SNYK-CONAN-RAPIDJSON-10078258
cwe	www.cwe.mitre.org/data/definitions/CWE-191.html

11 Jul 2024 03:53Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.8

CVSS 48.4

EPSS0.00088

SSVC