Arbitrary Code Execution

🗓️ 06 Aug 2020 21:35:13Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 23 Views

json-c vulnerability integer overflo

Reporter	Title	Published	Views	Family All 216
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by a vulnerability in json-c (CVE-2020-12762)	18 Dec 202014:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by multiple open source vulnerabilities.	26 Jun 202422:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in json-c may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution (CVE-2020-12762).	12 Jan 202418:47	–	ibm
FreeBSD	json-c -- integer overflow and out-of-bounds write via a large JSON file	2 May 202000:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : libfastjson, libfastjson-devel (ALAS2023-2023-205)	8 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : json-c, json-c-devel (ALAS2023-2023-232)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : json-c (ALAS-2020-1442)	2 Jul 202000:00	–	nessus
Tenable Nessus	Amazon Linux 2 : libfastjson (ALAS-2023-2079)	8 Jun 202300:00	–	nessus

Vulners

Node

json-c json-cMatch0.13.1-r0os

AND

alpinelinux alpine_linuxMatch3.9

OR

json-c json-cMatch0.14-r0os

AND

json-c json-cMatch0.13.1-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

libfastjson libfastjsonMatch0.99.9-r1os

AND

alpinelinux alpine_linuxMatch3.18

OR

libfastjson libfastjsonMatch0.99.8-r2os

AND

libfastjson libfastjsonMatch0.99.9-r1os

AND

libfastjson libfastjsonMatch0.99.9-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

libfastjson libfastjsonMatch0.99.9-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

libfastjson libfastjsonMatch0.99.9-r0os

AND

alpinelinux alpine_linuxMatch3.17

OR

libfastjson libfastjsonMatch0.99.9-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

json-c json-cMatch0.13.1_1.el8

OR

json-c json-cMatch0.13.1_0.3.el8

OR

json-c json-cMatch0.13.1_0.4.el8

OR

json-c json-cMatch0.13.1_0.2.el8

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2020/05/msg00032.html
lists	www.lists.debian.org/debian-lts-announce/2020/05/msg00034.html
lists	www.lists.debian.org/debian-lts-announce/2020/07/msg00031.html
lists	www.lists.debian.org/debian-lts-announce/2023/06/msg00023.html
debian	www.debian.org/security/2020/dsa-4741
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CQQRRGBQCAWNCCJ2HN3W5SSCZ4QGMXQI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/W226TSCJBEOXDUFVKNWNH7ETG7AR6MCS/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/CBR36IXYBHITAZFB5PFBJTED22WO5ONB/

07 Nov 2023 23:40Current

5.5Medium risk

Vulners AI Score5.5

CVSS 26.8

CVSS 3.17.8

EPSS0.0028

arbitrary code execution json-c integer overflow out-of-bounds write large json file printbuf_memappend software