Lucene search
Veracode Vulnerability DatabaseVERACODE:43569HistoryOct 06, 2023 - 11:43 a.m.
Denial Of Service (DoS)
2023-10-0611:43:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
json-c vulnerability hash collision application
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
79.7%
libjson-c.so is vulnerable to Denial Of Service (DoS). The vulnerability exists when parsing crafted JSON data, resulting in excessive CPU utilization caused by a hash collision which allows an attacker to cause an application crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libjson-c.so | le | 2.0.1 | |
| libjson-c.so | le | 2.0.1 |
Related
nvd
nvd
CVE-2013-6371
2014-04-22 13:06:26
cvelist
cvelist
CVE-2013-6371
2014-04-21 14:00:00
prion
prion
Design/Logic Flaw
2014-04-22 13:06:00
ibm
ibm
debiancve
debiancve
CVE-2013-6371
2014-04-22 13:06:26
cve
cve
CVE-2013-6371
2014-04-22 13:06:26
ubuntucve
ubuntucve
CVE-2013-6371
2014-04-08 00:00:00
openvas
openvas
Oracle: Security Advisory (ELSA-2014-0703)
2015-10-06 00:00:00
Fedora Update for json-c FEDORA-2014-4975
2014-05-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0175)
2022-01-28 00:00:00
oraclelinux
oraclelinux
json-c security update
2014-07-23 00:00:00
nessus
nessus
Oracle Linux 7 : json-c (ELSA-2014-0703)
2014-07-24 00:00:00
Fedora 20 : json-c-0.11-6.fc20 (2014-5006)
2014-04-18 00:00:00
RHEL 7 : json-c (RHSA-2014:0703)
2014-07-30 00:00:00
ubuntu
ubuntu
json-c vulnerabilities
2014-06-12 00:00:00
securityvulns
securityvulns
[ MDVSA-2014:079 ] json-c
2014-05-04 00:00:00
json-c security vulnerabilities
2014-05-04 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: json-c-0.11-6.fc20
2014-04-17 06:04:13
[SECURITY] Fedora 19 Update: json-c-0.11-6.fc19
2014-04-30 04:07:35
amazon
amazon
Medium: json-c
2014-09-18 21:04:00
redhat
redhat
(RHSA-2014:0703) Moderate: json-c security update
2014-06-10 00:00:00
mageia
mageia
Updated json-c packages fix security vulnerabilities
2014-04-16 17:08:14
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.007 Low
EPSS
Percentile
79.7%
Related for VERACODE:43569