CVE-2013-6371

Опубликовано: 22 апр. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html
Third Party Advisory
http://secunia.com/advisories/57791
Permissions Required
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2014:079
Broken Link
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Third Party Advisory
http://www.securityfocus.com/bid/66715
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1032311
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/92541
VDB Entry
https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015
Issue Tracking
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html
Third Party Advisory
http://secunia.com/advisories/57791
Permissions Required
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2014:079
Broken Link
http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
Third Party Advisory
http://www.securityfocus.com/bid/66715
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1032311
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/92541
VDB Entry
https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:json-c:json-c:*:*:*:*:*:*:*:*

Версия до 0.12-20140410 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00346

Низкий

5 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2013-6371

ubuntu

больше 11 лет назад

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

CVE-2013-6371

redhat

больше 11 лет назад

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

CVE-2013-6371

debian

больше 11 лет назад

The hash functionality in json-c before 0.12 allows context-dependent ...

GHSA-qmhf-38fc-rg36

github

больше 3 лет назад

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

ELSA-2014-0703

oracle-oval

около 11 лет назад

ELSA-2014-0703: json-c security update (MODERATE)

EPSS

Процентиль: 56%

0.00346

Низкий

5 Medium

CVSS2

Дефекты

CWE-310