jq vulnerabilities (SUSE)
24 vulnerabilities.
-
jqSUSE jq: potential integer overflow in jvp_string_append 6.9 Medium -
jqSUSE jq --rawfile invalid-state reuse after String too long causes heap-buffer-overflow 7.1 High -
jqSUSE jq: stack overflow in deep structural equality 6.8 Medium -
jqSUSE jq: Stack Overflow in Recursive Object Merge 6.2 Medium -
jqSUSE jq: Embedded NUL in jq import paths causes local redaction-policy bypass and preserves sensitive fields in published artifacts 4.4 Medium -
jqSUSE jq: stack overflow in module loading on mutual `include` 5.4 Medium -
jqSUSE jq: Wild stack write via signed-integer overflow in decNumber D2U() macro 6.2 Medium -
jqSUSE jq: Embedded NUL truncates top-level jq programs loaded with -f 5.5 Medium -
jqSUSE jq: Stack overflow via unbounded recursion in jv_contains 5.4 Medium -
jqSUSE jq: Signed-int overflow in `stack_reallocate` (jq VM stack) 6.4 Medium -
jqSUSE jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input 2.9 Low -
jqSUSE jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed 7.5 High -
jqSUSE jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers 6.9 Medium -
jqSUSE jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure 6.1 Medium -
jqSUSE jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted() 6.2 Medium -
jqSUSE jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow 8.2 High -
jqSUSE jqlang jq JSON jq_test.c run_jq_tests assertion 4.8 Medium -
jqSUSE AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) 7.7 High -
jqSUSE jq has signed integer overflow in jv.c:jvp_array_write 4.3 Medium -
jqSUSE jq v1.7.1 contains a stack-buffer-overflow in the decNumberCopy function within decNumber.c. 8.1 High -
jqSUSE jq has stack-based buffer overflow in decNaNs 6.2 Medium -
jqSUSE jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c 6.2 Medium -
jqSUSE The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack... 7.5 High -
jqSUSE Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a... 9.8 Critical