The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade jansson | Jul 30, 2024 | Mar 21, 2014 |
| Suse | — | Upgrade libjansson4Upgrade libjansson-develUpgrade libjansson | Mar 27, 2014 | Mar 20, 2014 |
| Ubuntu | — | Upgrade jansson | Nov 19, 2024 | Mar 21, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub