Red Hat Security AdvisoryRHSA-2014:0703
json-c security update
Released 2014-06-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) json-c-0.11-4.el7_0
- Red Hat Enterprise Linux Client Optional (v. 7) json-c-devel-0.11-4.el7_0, json-c-doc-0.11-4.el7_0
- Red Hat Enterprise Linux ComputeNode (v. 7) json-c-0.11-4.el7_0
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) json-c-devel-0.11-4.el7_0, json-c-doc-0.11-4.el7_0
- Red Hat Enterprise Linux Server (v. 7) json-c-0.11-4.el7_0, json-c-0.11-4.el7_0.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) json-c-devel-0.11-4.el7_0, json-c-devel-0.11-4.el7_0.ppc, json-c-doc-0.11-4.el7_0
- Red Hat Enterprise Linux Workstation (v. 7) json-c-0.11-4.el7_0
- Red Hat Enterprise Linux Workstation Optional (v. 7) json-c-devel-0.11-4.el7_0, json-c-doc-0.11-4.el7_0
Fixes 2 records
Priority LOW 30
Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0431 · Published 2014-04-21 · Partial fix CWE-119
Priority LOW 28
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0311 · Published 2014-04-21 · Partial fix CWE-310
