| Package | Affected versions | Patched versions |
|---|---|---|
| iperf3 | ≥ 3.0, < 3.0.12≥ 3.1, < 3.1.3 | 3.0.123.1.3 |
| suse package hub for suse linux enterprise | = 12 |
The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free