Published: 22/04/2014 Updated: 25/09/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The hash functionality in json-c prior to 0.12 allows context-dependent malicious users to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
json-c json-c
fedoraproject fedora 20

Debian Bug report logs - #744008 json-c: CVE-2013-6370 CVE-2013-6371 Package: src:json-c; Maintainer for src:json-c is Debian QA Group <packages@qadebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 9 Apr 2014 06:51:02 UTC Severity: important Tags: fixed-upstream, security, upstream Fixed ...

json-c could be made to crash or consume CPU if it processed a specially crafted JSON document ...

The hash functionality in json-c before 012 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions Buffer overflow in the printbuf APIs in json-c before 012 allows remote attackers to cause a denial of service via unspecified vectors ...

The hash functionality in json-c before 012 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions ...

CWE-310 http://secunia.com/advisories/57791 https://bugzilla.redhat.com/show_bug.cgi?id=1032311 http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015 http://www.mandriva.com/security/advisories?name=MDVSA-2014:079 http://www.securityfocus.com/bid/66715 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html https://exchange.xforce.ibmcloud.com/vulnerabilities/92541 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744008 https://usn.ubuntu.com/2245-1/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2013-6371

CVE-2013-6371

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect