Yüksek CVSS 7.8 PoC var
CVE-2020-12762: Json-c: tamsayı taşması
Açıklama (NVD)
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Özet bilgiler
- Ürün
- Json-c Json-c
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- %1,90 (yüzdelik 80)
- CWE
- CWE-190
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| json-c-json-c | — | — | 0.15-20200726 |
| fedoraproject-fedora | 30 | 30 | — |
| fedoraproject-fedora | 31 | 31 | — |
| fedoraproject-fedora | 32 | 32 | — |
| debian-debian-linux | 8.0 | 8.0 | — |
| debian-debian-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| canonical-ubuntu-linux | 12.04 | 12.04 | — |
| canonical-ubuntu-linux | 14.04 | 14.04 | — |
| canonical-ubuntu-linux | 16.04 | 16.04 | — |
| canonical-ubuntu-linux | 18.04 | 18.04 | — |
| canonical-ubuntu-linux | 19.10 | 19.10 | — |
| canonical-ubuntu-linux | 20.04 | 20.04 | — |
| siemens-sinec-ins | — | — | — |
| siemens-sinec-ins | 1.0 | 1.0 | — |
| siemens-sinec-ins | 1.0 | 1.0 | — |
Kaynaklar
- NVD kaydı
- cert-portal.siemens.com
- github.com
- github.com
- lists.debian.org
- lists.debian.org
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.gentoo.org
- security.netapp.com
- usn.ubuntu.com
- usn.ubuntu.com
- www.debian.org
- cert-portal.siemens.com
- github.com
- github.com
- lists.debian.org
- lists.debian.org
- lists.debian.org
- lists.debian.org
- lists.debian.org
- lists.fedoraproject.org
- CWE-190