Описание
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | iperf3 only |
| bionic | not-affected | iperf3 only |
| cosmic | not-affected | iperf3 only |
| devel | not-affected | iperf3 only |
| disco | not-affected | iperf3 only |
| eoan | not-affected | iperf3 only |
| esm-apps-legacy/xenial | not-affected | iperf3 only |
| esm-apps/bionic | not-affected | iperf3 only |
| esm-apps/focal | not-affected | iperf3 only |
| esm-apps/jammy | not-affected | iperf3 only |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.1.3-1 |
| cosmic | not-affected | 3.1.3-1 |
| devel | not-affected | 3.1.3-1 |
| disco | not-affected | 3.1.3-1 |
| eoan | not-affected | 3.1.3-1 |
| esm-apps-legacy/xenial | released | 3.0.11-1ubuntu0.1~esm1 |
| esm-apps/bionic | not-affected | 3.1.3-1 |
| esm-apps/focal | not-affected | 3.1.3-1 |
| esm-apps/jammy | not-affected | 3.1.3-1 |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
The parse_string function in cjson.c in the cJSON library mishandles U ...
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3