CVE-2023-50472

Опубликовано: 14 дек. 2023

Источник: redhat

CVSS3: 4

EPSS Низкий

Описание

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

A flaw was discovered in the cJSON package. Certain input conditions may trigger a null pointer dereference, which can lead to a denial of service.

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-476

https://bugzilla.redhat.com/show_bug.cgi?id=2254643cjson: segmentation violation in function cJSON_SetValuestring

EPSS

Процентиль: 38%

0.00167

Низкий

4 Medium

CVSS3

Связанные уязвимости

CVE-2023-50472

CVSS3: 7.5

ubuntu

почти 2 года назад

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

CVE-2023-50472

CVSS3: 7.5

nvd

почти 2 года назад

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

CVE-2023-50472

CVSS3: 7.5

msrc

почти 2 года назад

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

CVE-2023-50472

CVSS3: 7.5

debian

почти 2 года назад

cJSON v1.7.16 was discovered to contain a segmentation violation via t ...

GHSA-278h-99f9-m238

CVSS3: 7.5

github

почти 2 года назад

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

EPSS

Процентиль: 38%

0.00167

Низкий

4 Medium

CVSS3