Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:43766
HistoryOct 11, 2023 - 7:39 p.m.

Stack Buffer Overflow

2023-10-1119:39:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
stack buffer overflow
libjson-c.so
parseit function
json_parse.c
application crash
vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

34.2%

libjson-c.so is vulnerable to Stack Buffer Overflow. The vulnerability exists in parseit function at json_parse.c which allows an attacker to cause a buffer overflow resulting in an application crash.

CPENameOperatorVersion
libjson-c.soeq5.1.0
libjson-c.soeq5.1.0

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

34.2%