PT-2014-3098 · Json-C+3 · Json-C+3

Publicado 2014-04-08 · Atualizado 2024-06-15 · CVE-2013-6370

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions json-c versions prior to 0.12

Description The issue is related to a buffer overflow in the printbuf APIs, which can be exploited by remote attackers to cause a denial of service. The exact vectors used for the attack are not specified.

Recommendations For versions prior to 0.12, update to version 0.12 or later to resolve the issue.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2014-1691

ALT-PU-2019-4163

ALT-PU-2020-2322

ALT-PU-2023-6481

ALT-PU-2023-6841

CVE-2013-6370

MGASA-2014-0175

OPENSUSE-SU-2024:10013-1

OPENSUSE-SU-2024:10498-1

RHSA-2014:0703

RHSA-2014_0703

USN-2245-1

Produtos afetados

Alt Linux

Red Hat

Ubuntu

Json-C

Referências · 31

• 🔥 https://github.com/json-c/json-c/commit/64e36901a0614bf64a19bc3396469c66dcd0b015 · Exploit
• http://oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Nota
• https://osv.dev/vulnerability/CVE-2013-6370 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2013-6370 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2013-6370 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2013-6370 · Nota
• http://securityfocus.com/bid/66720 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-6370 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0175.html · Nota de Segurança
• https://osv.dev/vulnerability/openSUSE-SU-2024:10498-1 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1032311 · Nota
• https://suse.com/security/cve/CVE-2014-3683 · Nota
• https://ubuntu.com/security/notices/USN-2245-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2011-3200 · Nota