ALT-PU-2024-17553-1
Package cjson updated to version 1.7.18-alt1 for branch sisyphus_riscv64.
Closed vulnerabilities
Published: 2023-12-04
BDU:2024-01768
Уязвимость функции cJSON_InsertItemInArray библиотеки для обработки JSON файлов на языке С JSON-C, позволяющая нарушителю вызвать отказ в обслуживании
Severity: HIGH (7.5)
Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
Published: 2023-12-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-50471
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- https://github.com/DaveGamble/cJSON/issues/802
- https://github.com/DaveGamble/cJSON/issues/802
- [debian-lts-announce] 20231230 [SECURITY] [DLA 3700-1] cjson security update
- [debian-lts-announce] 20231230 [SECURITY] [DLA 3700-1] cjson security update
- FEDORA-2024-74563262c0
- FEDORA-2024-74563262c0
- FEDORA-2024-5b487ca10a
- FEDORA-2024-5b487ca10a
- FEDORA-2024-b93a6b1325
- FEDORA-2024-b93a6b1325
Published: 2023-12-14
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2023-50472
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.
Severity: HIGH (7.5)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References: