struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT.
References
Link | Resource |
---|---|
https://github.com/armink/struct2json/issues/13 | Exploit Third Party Advisory |
Configurations
Information
Published : 2020-12-26 12:15
Updated : 2020-12-30 07:37
NVD link : CVE-2020-29203
Mitre link : CVE-2020-29203
JSON object : View
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Products Affected
struct2json_project
- struct2json