Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Emanuele6

#42709of 53,633
6.2Total CVSS
Vulnerabilities · 1
PT-2023-8958
6.2
2023-12-13
Jq · Jq · CVE-2023-50268
**Name of the Vulnerable Software and Affected Versions** jq version 1.7 **Description** The issue is related to a stack-based buffer overflow in builds using decNumber, which can allow an attacker to cause a denial of service. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** For version 1.7, update to version 1.7.1 to resolve the issue. As a temporary workaround, consider restricting the use of decNumber in builds until a patch is applied.