NetSight
IP …
high7.8

CVE-2020-12762

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Impact

json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.

Affected products

VendorProductAffected versions
Json-CJson-C
before 0.15-20200726
FedoraprojectFedora
Versions 30, 31, 32
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 19.10, 20.04
SiemensSinec Ins
All versions
Version 1.0

Weakness classification

CWE-190CWE-787

References