Поиск уязвимостей
Количество 11
Количество 11
GHSA-8mxc-vqrq-gcm8
jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c.
CVE-2024-53427
decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).
CVE-2024-53427
decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).
CVE-2024-53427
decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).
CVE-2024-53427
decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits).
CVE-2024-53427
decNumberCopy in decNumber.c in jq through 1.7.1 does not properly con ...
BDU:2025-06690
Уязвимость функции decNumberCopy функционального языка программирования jq, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20250724-04
Множественные уязвимости jq
ALT-PU-2025-7731
ALT-PU-2025-7731: package `jq` update to version 1.8.0-alt1
ALT-PU-2026-2654
ALT-PU-2026-2654: package `jq` update to version 1.8.1-alt1
SUSE-SU-2026:4275-1
Security update for jq
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-8mxc-vqrq-gcm8 jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c. | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). | CVSS3: 5.3 | 0% Низкий | больше 1 года назад |
 | CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form of digit string with NaN (e.g., "1 NaN123" immediately followed by many more digits). | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
| CVE-2024-53427 decNumberCopy in decNumber.c in jq through 1.7.1 does not properly con ... | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | BDU:2025-06690 Уязвимость функции decNumberCopy функционального языка программирования jq, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | ROS-20250724-04 Множественные уязвимости jq | CVSS3: 8.1 | больше 1 года назад | |
| ALT-PU-2025-7731 ALT-PU-2025-7731: package `jq` update to version 1.8.0-alt1 | CVSS3: 8.1 | больше 1 года назад | |
| ALT-PU-2026-2654 ALT-PU-2026-2654: package `jq` update to version 1.8.1-alt1 | CVSS3: 8.1 | 9 месяцев назад | |
 | SUSE-SU-2026:4275-1 Security update for jq | около 2 месяцев назад |
Уязвимостей на страницу