Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240827-13
HistoryAug 27, 2024 - 12:00 a.m.

ROS-20240827-13

2024-08-2700:00:00
redos.red-soft.ru
3
python
ultrajson
vulnerability
control flow
remote attackers
data integrity

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

Low

JSON

A vulnerability in the UltraJSON package of the Python programming language is related to the implementation of an incorrect control flow
control flow. Exploitation of the vulnerability could allow an attacker acting remotely to cause
impact data integrity

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64python3-ujson< 5.9.0-1UNKNOWN

Related

redhatcve 1
ubuntucve 1
cve 1
cvelist 1
nvd 1
osv 5
veracode 1
alpinelinux 1
prion 1
debiancve 1
github 1
nessus 7
openvas 8
fedora 2
gentoo 1
mageia 1
redhat 2
suse 1
ubuntu 3
ibm 3
redhatcve
redhatcve
CVE-2022-31116
2022-07-07 17:50:56
ubuntucve
ubuntucve
CVE-2022-31116
2022-07-05 00:00:00
cve
cve
CVE-2022-31116
2022-07-05 18:15:08
cvelist
cvelist
CVE-2022-31116 Incorrect handling of invalid surrogate pair characters in ujson
2022-07-05 17:35:11
nvd
nvd
CVE-2022-31116
2022-07-05 18:15:08
osv
osv
Incorrect handling of invalid surrogate pair characters
2022-07-05 21:06:00
CVE-2022-31116
2022-07-05 18:15:08
ujson vulnerabilities
2024-02-14 01:41:18
veracode
veracode
Insecure Cryptography
2022-07-06 05:26:52
alpinelinux
alpinelinux
CVE-2022-31116
2022-07-05 18:15:08
prion
prion
Type confusion
2022-07-05 18:15:00
debiancve
debiancve
CVE-2022-31116
2022-07-05 18:15:08
github
github
Incorrect handling of invalid surrogate pair characters
2022-07-05 21:06:00
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.2.4 (python-ujson) (RHSA-2022:8850)
2023-01-23 00:00:00
SUSE SLED15 / SLES15 Security Update : python-ujson (SUSE-SU-2022:2673-1)
2022-08-05 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.1.9 (python-ujson) (RHSA-2022:8864)
2023-01-23 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:2673-1)
2022-08-05 00:00:00
openSUSE: Security Advisory for python-ujson (SUSE-SU-2022:2673-1)
2022-08-05 00:00:00
Fedora: Security Advisory for python-ujson (FEDORA-2022-1b2b8d5177)
2022-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: python-ujson-5.4.0-1.fc36
2022-07-23 02:01:21
[SECURITY] Fedora 35 Update: python-ujson-5.4.0-1.fc35
2022-08-03 01:49:48
gentoo
gentoo
UltraJSON: Multiple Vulnerabilities
2024-03-03 00:00:00
mageia
mageia
Updated python-ujson packages fix security vulnerability
2022-07-29 23:53:30
redhat
redhat
(RHSA-2022:8850) Moderate: Red Hat OpenStack Platform 16.2.4 (python-ujson) security update
2022-12-07 19:00:47
(RHSA-2022:8864) Moderate: Red Hat OpenStack Platform 16.1.9 (python-ujson) security update
2022-12-07 20:09:53
suse
suse
Security update for python-ujson (moderate)
2022-08-04 00:00:00
ubuntu
ubuntu
UltraJSON vulnerability
2024-02-14 00:00:00
UltraJSON vulnerabilities
2024-02-14 00:00:00
UltraJSON vulnerabilities
2024-02-14 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar Assistant App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2024-04-29 16:48:58
Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities
2023-06-20 04:41:00
Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities
2023-01-12 17:22:50

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.6

Confidence

Low

JSON
Related for ROS-20240827-13
redhatcve1ubuntucve1cve1cvelist1nvd1osv5veracode1alpinelinux1prion1debiancve1github1nessus7openvas8fedora2gentoo1mageia1redhat2suse1ubuntu3ibm3