PT-2018-9383 · Dave Gamble · Cjson

Alfie Deng · Publicado 2018-08-20 · Atualizado 2025-07-22 · CVE-2018-1000215

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions cJSON versions 1.7.6 and earlier

Description The issue in the cJSON library can result in Denial of Service (DoS) and potentially force a memory leak if the system is in low memory and the attacker can force the data to be printed.

Recommendations For versions 1.7.6 and earlier, update to version 1.7.7 to resolve the issue.

Correção

DoS

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

AZL-41919

CVE-2018-1000215

Produtos afetados

Cjson

Referências · 12

• https://github.com/DaveGamble/cJSON/issues/267 · Nota
• https://github.com/DaveGamble/cJSON/commit/af5b4911de6e00306370460d978ac1654d3aeaec · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-1000215 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1000215 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000215 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000215 · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-41919 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-1000215 · Nota de Segurança
• https://ubuntu.com/security/CVE-2018-1000215 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000215 · Aviso do Fabricante
• https://t.me/cvenotify/129860 · Publicação no Telegram
• https://t.me/cveNotify/129860 · Publicação no Telegram