Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-23337

Опубликовано: 21 мая 2025
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
EPSS Низкий

Описание

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jqlang:jq:*:*:*:*:*:*:*:*
Версия до 1.7.1 (включая)

EPSS

Процентиль: 23%
0.00074
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 4.3
ubuntu
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

CVSS3: 4.3
redhat
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

CVSS3: 4.3
msrc
4 месяца назад

jq has signed integer overflow in jv.c:jvp_array_write

CVSS3: 4.3
debian
6 месяцев назад

jq is a command-line JSON processor. In versions up to and including 1 ...

suse-cvrf
4 месяца назад

Security update for jq

EPSS

Процентиль: 23%
0.00074
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-190