Описание
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | needs-triage | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| esm-apps/xenial | ignored | end of ESM support, was needs-triage |
| esm-infra-legacy/trusty | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 5.4.0-1 |
| esm-apps-legacy/xenial | released | 1.33-1ubuntu0.1~esm2 |
| esm-apps/bionic | released | 1.35-2ubuntu0.1~esm1 |
| esm-apps/focal | released | 1.35-4ubuntu0.1 |
| esm-apps/jammy | released | 5.1.0-1ubuntu0.1~esm1 |
| esm-apps/noble | not-affected | 5.4.0-1 |
| esm-apps/resolute | not-affected | 5.4.0-1 |
| esm-apps/xenial | released | 1.33-1ubuntu0.1~esm2 |
| focal | released | 1.35-4ubuntu0.1 |
Показывать по
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow ...
ALT-PU-2022-2708: package `python3-module-ujson` update to version 5.5.0-alt1
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3