Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9xc3-9g76-hcvx

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.

EPSS

Процентиль: 64%
0.00464
Низкий

7.5 High

CVSS3

Дефекты

CWE-772

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 7 лет назад

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.

CVSS3: 7.5
nvd
больше 7 лет назад

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can force a leak of memory. This vulnerability appears to have been fixed in 1.7.7.

CVSS3: 7.5
msrc
5 месяцев назад

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service

CVSS3: 7.5
debian
больше 7 лет назад

Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnera ...

EPSS

Процентиль: 64%
0.00464
Низкий

7.5 High

CVSS3

Дефекты

CWE-772