cjson project cjson vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

parse_string in cJSON.c in cJSON prior to 2016-10-02 has a buffer over-read, as demonstrated by a string that begins with a " character and ends with a \ character.

Cjson Project Cjson

7.5

CVSSv3

Dave Gamble cJSON version 1.7.6 and previous versions contains a CWE-772 vulnerability in cJSON library that can result in Denial of Service (DoS). This attack appear to be exploitable via If the attacker can force the data to be printed and the system is in low memory it can for...

Cjson Project Cjson

8.8

CVSSv3

Dave Gamble cJSON version 1.7.2 and previous versions contains a CWE-415: Double Free vulnerability in cJSON library that can result in Possible crash or RCE. This attack appear to be exploitable via Attacker must be able to force victim to print JSON data, depending on how cJSON...

Cjson Project Cjson

9.8

CVSSv3

Dave Gamble cJSON version 1.7.3 and previous versions contains a CWE-416: Use After Free vulnerability in cJSON library that can result in Possible crash, corruption of data or even RCE. This attack appear to be exploitable via Depends on how application uses cJSON library. If ap...

Cjson Project Cjson

7.5

CVSSv3

cJSON v1.7.16 exists to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

Cjson Project Cjson 1.7.16

7.5

CVSSv3

cJSON v1.7.16 exists to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

Cjson Project Cjson 1.7.16

9.8

CVSSv3

cJSON prior to 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.

Cjson Project Cjson Oracle Timesten In-memory Database

9.8

CVSSv3

cJSON prior to 1.7.11 allows out-of-bounds access, related to multiline comments.

Cjson Project Cjson Oracle Timesten In-memory Database

7.5

CVSSv3

DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions. The impact is: Null dereference, so attack can cause denial of service. The component is: cJSON_GetObjectItemCaseSensitive() function. The attack vector is: crafted json file. The f...

Cjson Project Cjson 1.7.8 Oracle Timesten In-memory Database

1 Article

9.8

CVSSv3

The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote malicious users to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.

Iperf3 Project Iperf3 Novell Suse Package Hub For Suse Linux Enterprise 12 Opensuse Leap 42.1 Opensuse Opensuse 13.2 Debian Debian Linux 8.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook