Описание
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
A flaw was found in DaveGamble cJSON. The cJSONUtils_MergePatch function in cJSON_Utils.c is vulnerable to a use-after-free error. A remote attacker could exploit this memory corruption vulnerability, potentially leading to information disclosure, data corruption, or denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 8 | rpm-ostree | Under investigation | ||
| Red Hat Hardened Images | chunkah | Not affected | ||
| Red Hat OpenShift Container Platform 4 | rpm-ostree | Under investigation | ||
| Red Hat Satellite 6 | cjson | Under investigation |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
EPSS
8.6 High
CVSS3
Связанные уязвимости
(A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affect ...)
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affect ...
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtils_MergePatch of the file cJSON_Utils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to fix this issue awaits acceptance.
EPSS
8.6 High
CVSS3