CVE-2024-31755

Опубликовано: 26 апр. 2024

Источник: nvd

CVSS3: 7.6

EPSS Низкий

Описание

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.

Ссылки

https://github.com/DaveGamble/cJSON/issues/839
Exploit
Issue Tracking
Vendor Advisory
https://github.com/DaveGamble/cJSON/issues/839
Exploit
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cjson_project:cjson:1.7.17:*:*:*:*:*:*:*

EPSS

Процентиль: 76%

0.01

Низкий

7.6 High

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2024-31755

CVSS3: 7.6

ubuntu

больше 1 года назад

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.

CVE-2024-31755

CVSS3: 7.5

redhat

больше 1 года назад

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.

CVE-2024-31755

CVSS3: 7.6

msrc

больше 1 года назад

Описание отсутствует

CVE-2024-31755

CVSS3: 7.6

debian

больше 1 года назад

cJSON v1.7.17 was discovered to contain a segmentation violation, whic ...

GHSA-5g69-hr8r-x577

CVSS3: 7.6

github

больше 1 года назад

cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.

EPSS

Процентиль: 76%

0.01

Низкий

7.6 High

CVSS3

Дефекты

CWE-476