Json-c CVEs and Security Vulnerabilities

CVE-2021-32292

json-c: stack-buffer-overflow in parseit() in json_parse.c

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed

Vendors

Json-c Netapp

Products

Json-c Active Iq Unified Manager

CVE-2020-12762

libfastjson: integer overflow and out-of-bounds write via a large JSON file

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2013-6370

json-c: buffer overflow if size_t is larger than int

Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 4.3% KEV · Not listed

Vendors

Fedoraproject Json-c Redhat

Products

Fedora Json-c Enterprise Linux

CVE-2013-6371

json-c: hash collision DoS

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.

CVSS 2.0 · 5.0 Medium EPSS 3.1% KEV · Not listed

Vendors

Fedoraproject Json-c Redhat

Products

Fedora Json-c Enterprise Linux

Search vulnerabilities

json-c: stack-buffer-overflow in parseit() in json_parse.c

libfastjson: integer overflow and out-of-bounds write via a large JSON file

json-c: buffer overflow if size_t is larger than int

json-c: hash collision DoS