Red Hat Security AdvisoryRHSA-2021:4382
json-c security and bug fix update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat CodeReady Linux Builder (v. 8) json-c-doc-0.13.1-2.el8
- Red Hat Enterprise Linux AppStream (v. 8) json-c-devel-0.13.1-2.el8
- Red Hat Enterprise Linux BaseOS (v. 8) json-c-0.13.1-2.el8
Fixes 1 record
Priority MEDIUM 40
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01895 · Published 2020-05-09 · Partial fix CWE-787
