jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.
References
Link | Resource |
---|---|
https://github.com/buger/jsonparser/issues/219 | Exploit Issue Tracking Patch Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27EA7OGCELV7QFAGVIHODHWKMKGFVIUZ/ | Mailing List Third Party Advisory |
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LJO5N7YTDEUSTKYTNA372CE6VHCZJWUG/ | Mailing List Third Party Advisory |
Information
Published : 2020-12-15 13:15
Updated : 2022-10-06 11:05
NVD link : CVE-2020-35381
Mitre link : CVE-2020-35381
JSON object : View
CWE
Products Affected
fedoraproject
- fedora
jsonparser_project
- jsonparser