cjson vulnerabilities (Debian)
16 vulnerabilities.
-
cjsonDebian DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use after free 6.9 Medium -
cjsonDebian cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding 8.7 High -
cjsonDebian cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation 6.9 Medium -
cjsonDebian cJSON cJSON_Compare Exponential Complexity Denial of Service 8.2 High -
cjsonDebian cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion 8.7 High -
cjsonDebian Integer Overflow Leading to Heap Buffer Overflow in cJSON 5.1 Medium -
cjsonDebian cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer... 9.8 Critical -
cjsonDebian parse_string in cJSON before 1.7.18 has a heap-based buffer over-read via {"1":1, with no... 2.9 Low -
cjsonDebian cJSON 1.7.15 might allow a denial of service via a crafted JSON document such as {"a": true, "b":... 2.9 Low -
cjsonDebian cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the... 7.6 High -
cjsonDebian cJSON v1.7.16 was discovered to contain a segmentation violation via the function... 7.5 High -
cjsonDebian cJSON v1.7.16 was discovered to contain a segmentation violation via the function... 7.5 High -
cjsonDebian DaveGamble/cJSON cJSON 1.7.8 is affected by: Improper Check for Unusual or Exceptional Conditions... 7.5 High -
cjsonDebian cJSON before 1.7.11 allows out-of-bounds access, related to multiline comments. 9.8 Critical -
cjsonDebian cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal. 9.8 Critical -
cjsonDebian Dave Gamble cJSON version 1.7.6 and earlier contains a CWE-772 vulnerability in cJSON library... 7.5 High