Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-23337

Опубликовано: 21 мая 2025
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 4.3

Описание

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

РелизСтатусПримечание
devel

not-affected

1.7.1-6ubuntu1
esm-apps/bionic

released

1.5+dfsg-2ubuntu0.1~esm1
esm-apps/xenial

released

1.5+dfsg-1ubuntu0.1+esm3
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/focal

released

1.6-1ubuntu0.20.04.1+esm1
focal

ignored

end of standard support, was needs-triage
jammy

released

1.6-2.1ubuntu3.1
noble

released

1.7.1-3ubuntu0.24.04.1
oracular

ignored

end of life, was needs-triage
plucky

released

1.7.1-3ubuntu1.1

Показывать по

EPSS

Процентиль: 17%
0.00055
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
3 месяца назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

CVSS3: 4.3
nvd
3 месяца назад

jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when assigning value using an index of 2147483647, the signed integer limit. This causes a denial of service. Commit de21386681c0df0104a99d9d09db23a9b2a78b1e contains a patch for the issue.

CVSS3: 6.5
msrc
28 дней назад

Описание отсутствует

CVSS3: 4.3
debian
3 месяца назад

jq is a command-line JSON processor. In versions up to and including 1 ...

suse-cvrf
20 дней назад

Security update for jq

EPSS

Процентиль: 17%
0.00055
Низкий

4.3 Medium

CVSS3