Описание
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2016-4425
- https://github.com/akheron/jansson/issues/282
- https://github.com/akheron/jansson/pull/284
- https://github.com/akheron/jansson/pull/284/commits/64ce0ad3731ebd77e02897b07920eadd0e2cc318
- http://www.debian.org/security/2015/dsa-3577
- http://www.openwall.com/lists/oss-security/2016/05/01/5
- http://www.openwall.com/lists/oss-security/2016/05/02/1
- http://www.openwall.com/lists/oss-security/2016/05/03/3
Связанные уязвимости
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
Jansson 2.7 and earlier allows context-dependent attackers to cause a denial of service (deep recursion, stack consumption, and crash) via crafted JSON data.
Jansson 2.7 and earlier allows context-dependent attackers to cause a ...
ALT-PU-2018-2705: package `jansson` update to version 2.10-alt1