Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-4303
HistorySep 26, 2016 - 2:59 p.m.

CVE-2016-4303

2016-09-2614:59:01
CWE-120
[email protected]
web.nvd.nist.gov
166
4
cjson
cve-2016-4303
denial of service
arbitrary code execution
buffer overflow
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.017

Percentile

87.9%

JSON

The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.

Affected configurations

NVD
Node
iperf3_projectiperf3Range3.0–3.0.12
OR
iperf3_projectiperf3Range3.1–3.1.3
Node
novellsuse_package_hub_for_suse_linux_enterpriseMatch12
OR
opensuseleapMatch42.1
OR
opensuseopensuseMatch13.2
Node
debiandebian_linuxMatch8.0

Social References

More

Related

fedora 3
mageia 1
openvas 6
debian 1
nessus 7
seebug 1
talos 1
osv 2
freebsd 1
prion 1
cvelist 1
nvd 1
ubuntucve 1
debiancve 1
ubuntu 1
fedora
fedora
[SECURITY] Fedora 22 Update: iperf3-3.1.3-1.fc22
2016-06-18 04:20:31
[SECURITY] Fedora 23 Update: iperf3-3.1.3-1.fc23
2016-06-18 04:26:52
[SECURITY] Fedora 24 Update: iperf3-3.1.3-1.fc24
2016-06-18 19:19:27
mageia
mageia
Updated iperf packages fix security vulnerability
2016-07-05 18:47:08
openvas
openvas
Ubuntu: Security Advisory (USN-4788-1)
2023-01-27 00:00:00
Fedora Update for iperf3 FEDORA-2016-d67864115d
2016-06-19 00:00:00
Debian: Security Advisory (DLA-2080-1)
2020-01-28 00:00:00
debian
debian
[SECURITY] [DLA 2080-1] iperf3 security update
2020-01-27 21:51:10
nessus
nessus
Fedora 22 : iperf3 (2016-45402a6f3b)
2016-07-14 00:00:00
FreeBSD : iperf3 -- buffer overflow (d6bbf2d8-2cfc-11e6-800b-080027468580)
2016-06-09 00:00:00
Fedora 23 : iperf3 (2016-9693e82a25)
2016-07-14 00:00:00
seebug
seebug
ESnet iPerf3 JSON parse_string UTF Code Execution Vulnerability(CVE-2016-4303)
2017-10-20 00:00:00
talos
talos
ESnet iPerf3 JSON parse_string UTF Code Execution Vulnerability
2016-06-08 00:00:00
osv
osv
iperf3 vulnerability
2021-03-15 21:06:51
iperf3 - security update
2020-01-27 00:00:00
freebsd
freebsd
iperf3 -- buffer overflow
2016-06-08 00:00:00
prion
prion
Heap overflow
2016-09-26 14:59:00
cvelist
cvelist
CVE-2016-4303
2016-09-26 14:00:00
nvd
nvd
CVE-2016-4303
2016-09-26 14:59:01
ubuntucve
ubuntucve
CVE-2016-4303
2016-09-26 00:00:00
debiancve
debiancve
CVE-2016-4303
2016-09-26 14:59:01
ubuntu
ubuntu
iperf3 vulnerability
2021-03-15 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.017

Percentile

87.9%

JSON
Related for CVE-2016-4303
fedora3mageia1openvas6debian1nessus7seebug1talos1osv2freebsd1prion1cvelist1nvd1ubuntucve1debiancve1ubuntu1