Vendors / Json-c Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Json-c records in CISA KEV No Json-c vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01353 · Published 2023-08-22 · No fix listed CWE-787
Priority MEDIUM 40
json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01895 · Published 2020-05-09 · Partial fix CWE-787
Priority LOW 30
Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0431 · Published 2014-04-21 · Partial fix CWE-119
Priority LOW 28
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0311 · Published 2014-04-21 · Partial fix CWE-310
Open these records in search → All records by CVSS severity
1 1 2 0 0
THREATIST.IORead the docs