Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2024-0156
HistoryMay 01, 2024 - 1:25 a.m.

Updated cjson packages fix security vulnerabilities

2024-05-0101:25:14
Gentoo Foundation
advisories.mageia.org
21
cjson
v1.7.16
segmentation violation
cve-2023-50471
cjson_insertiteminarray
cjson_setvaluestring
unix

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.5%

JSON

cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c. (CVE-2023-50471) cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c. (CVE-2023-50472)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchcjson< 1.7.15-2.1cjson-1.7.15-2.1.mga9

Related

openvas 7
ubuntu 1
nessus 5
osv 4
gitlab 2
cvelist 2
ubuntucve 2
nvd 2
veracode 2
cbl_mariner 2
prion 2
fedora 3
debian 1
debiancve 2
cve 2
redhatcve 2
alpinelinux 2
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0156)
2024-05-01 00:00:00
openSUSE: Security Advisory for cJSON (openSUSE-SU-2024:0139-1)
2024-05-26 00:00:00
Ubuntu: Security Advisory (USN-6784-1)
2024-05-24 00:00:00
ubuntu
ubuntu
cJSON vulnerabilities
2024-05-23 00:00:00
nessus
nessus
openSUSE 15 Security Update : cJSON (openSUSE-SU-2024:0139-1)
2024-05-27 00:00:00
Ubuntu 22.04 LTS / 23.10 / 24.04 LTS : cJSON vulnerabilities (USN-6784-1)
2024-05-23 00:00:00
Fedora 39 : cjson (2024-74563262c0)
2024-04-23 00:00:00
osv
osv
cjson vulnerabilities
2024-05-23 13:00:48
CVE-2023-50472
2023-12-14 20:15:53
cjson - security update
2023-12-30 00:00:00
gitlab
gitlab
NULL Pointer Dereference
2023-12-14 00:00:00
NULL Pointer Dereference
2023-12-14 00:00:00
cvelist
cvelist
CVE-2023-50472
2023-12-14 00:00:00
CVE-2023-50471
2023-12-14 00:00:00
ubuntucve
ubuntucve
CVE-2023-50472
2023-12-14 00:00:00
CVE-2023-50471
2023-12-14 00:00:00
nvd
nvd
CVE-2023-50472
2023-12-14 20:15:53
CVE-2023-50471
2023-12-14 20:15:53
veracode
veracode
Denial Of Service (DoS)
2023-12-19 08:55:47
Denial Of Service (DoS)
2023-12-19 08:47:27
cbl_mariner
cbl_mariner
CVE-2023-50472 affecting package apparmor for versions less than 3.0.4-3
2024-01-04 19:54:01
CVE-2023-50471 affecting package apparmor for versions less than 3.0.4-3
2024-01-04 19:54:01
prion
prion
Design/Logic Flaw
2023-12-14 20:15:00
Design/Logic Flaw
2023-12-14 20:15:00
fedora
fedora
[SECURITY] Fedora 38 Update: cjson-1.7.17-1.fc38
2024-04-23 02:05:04
[SECURITY] Fedora 39 Update: cjson-1.7.17-1.fc39
2024-04-23 01:20:28
[SECURITY] Fedora 40 Update: cjson-1.7.17-1.fc40
2024-04-23 01:15:32
debian
debian
[SECURITY] [DLA 3700-1] cjson security update
2023-12-30 18:52:03
debiancve
debiancve
CVE-2023-50471
2023-12-14 20:15:53
CVE-2023-50472
2023-12-14 20:15:53
cve
cve
CVE-2023-50471
2023-12-14 20:15:53
CVE-2023-50472
2023-12-14 20:15:53
redhatcve
redhatcve
CVE-2023-50472
2023-12-15 01:30:13
CVE-2023-50471
2023-12-15 01:30:13
alpinelinux
alpinelinux
CVE-2023-50472
2023-12-14 20:15:53
CVE-2023-50471
2023-12-14 20:15:53

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.5%

JSON
Related for MGASA-2024-0156
openvas7ubuntu1nessus5osv4gitlab2cvelist2ubuntucve2nvd2veracode2cbl_mariner2prion2fedora3debian1debiancve2cve2redhatcve2alpinelinux2