CVE-2013-6370

Description

References

• lists.fedoraproject.org/pipermail/package-announce/2014-April/131845.html · Mailing List
• secunia.com/advisories/57791 · Permissions Required
• mandriva.com/security/advisories · Broken Link
• oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html · Third Party Advisory
• securityfocus.com/bid/66720 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• exchange.xforce.ibmcloud.com/vulnerabilities/92540 · VDB Entry
• json-c/json-c commit 64e3690 · Exploit

json-c 的其他漏洞

• CVE-2021-32292严重 9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the aux…
• CVE-2020-12762高危 7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
• CVE-2013-6371中危 5.0The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted J…