PT-2018-9383 · Dave Gamble · Cjson

Alfie Deng · CVE-2018-1000215 · Published 2018-08-20 · Updated 2025-07-22

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions cJSON versions 1.7.6 and earlier

Description The issue in the cJSON library can result in Denial of Service (DoS) and potentially force a memory leak if the system is in low memory and the attacker can force the data to be printed.

Recommendations For versions 1.7.6 and earlier, update to version 1.7.7 to resolve the issue.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

AZL-41919

CVE-2018-1000215

Affected Products

Cjson

References · 12

• https://security-tracker.debian.org/tracker/CVE-2018-1000215 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000215 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000215 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000215 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-41919 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1000215 · Security Note
• https://ubuntu.com/security/CVE-2018-1000215 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000215 · Vendor Advisory
• https://github.com/DaveGamble/cJSON/issues/267 · Note
• https://github.com/DaveGamble/cJSON/commit/af5b4911de6e00306370460d978ac1654d3aeaec · Note
• https://t.me/cvenotify/129860 · Telegram Post
• https://t.me/cveNotify/129860 · Telegram Post