json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade json-c-docUpgrade libfastjson-develUpgrade json-c-develUpgrade libfastjson | May 4, 2022 | May 9, 2020 |
| Alpine Linux | — | Upgrade libfastjsonUpgrade json-c | Jun 16, 2020 | May 9, 2020 |
| Amazon Linux Ami 2 | — | Upgrade json-c-debuginfoUpgrade json-c-develUpgrade json-c-docUpgrade libfastjsonUpgrade json-cUpgrade libfastjson-develUpgrade libfastjson-debuginfo | Jul 2, 2020 | May 9, 2020 |
| Amazon_linux | — | Upgrade json-c | Jul 2, 2020 | May 9, 2020 |
| Amazon_linux_2023 | — | Upgrade json-c-debuginfoUpgrade json-c-docUpgrade json-c-debugsourceUpgrade json-c-develUpgrade json-cUpgrade libfastjson-debugsourceUpgrade libfastjsonUpgrade libfastjson-debuginfoUpgrade libfastjson-devel | Feb 17, 2025 | May 2, 2020 |
| Centos_linux | — | Upgrade json-c-debugsourceUpgrade json-c-debuginfoUpgrade libfastjson-debuginfoUpgrade libfastjsonUpgrade libfastjson-debugsourceUpgrade json-cUpgrade json-c-devel | Nov 10, 2021 | May 9, 2020 |
| Debian | — | Upgrade json-cUpgrade libfastjson | Jun 2, 2020 | May 9, 2020 |
| Dell Powerstore Dsa2024462 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Nov 20, 2024 |
| Freebsd | — | Upgrade json-c | May 15, 2020 | May 14, 2020 |
| Gentoo Linux | — | Upgrade dev-libs/json-c. | Jun 16, 2020 | May 9, 2020 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libfastjson | Jan 10, 2024 | May 9, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade json-c | Jun 17, 2020 | May 9, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade json-c | Sep 28, 2020 | May 9, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade json-c | Jun 3, 2020 | May 9, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade json-cUpgrade json-c-devel | May 27, 2020 | May 9, 2020 |
| Oracle Solaris | — | Upgrade library/json-c to version 0.12-11.4.23.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 9, 2020 |
| Oracle_linux | — | Upgrade libfastjson-develUpgrade json-cUpgrade json-c-develUpgrade json-c-docUpgrade libfastjson | Nov 17, 2021 | May 2, 2020 |
| Redhat_linux | — | Upgrade json-cUpgrade libfastjson-debugsourceUpgrade json-c-debuginfoUpgrade libfastjson-debuginfoUpgrade json-c-docUpgrade json-c-develUpgrade libfastjson-develUpgrade libfastjsonUpgrade json-c-debugsourceNo solution exists | Nov 10, 2021 | May 9, 2020 |
| Rocky_linux | — | Upgrade libfastjson-debugsourceUpgrade libfastjson-debuginfoUpgrade libfastjsonUpgrade json-c-develUpgrade json-c-debugsourceUpgrade json-cUpgrade json-c-debuginfoUpgrade libfastjson-devel | Mar 12, 2024 | May 9, 2020 |
| Suse | — | Upgrade libjson-c3-32bitUpgrade libjson-c-develUpgrade libjson-c-docUpgrade libjson-c3 | Jan 26, 2022 | May 9, 2020 |
| Ubuntu | — | Upgrade libjson-c2 (Ubuntu Pro)Upgrade libjson-c3Upgrade libjson-c4Upgrade libjson0Upgrade libjson-c2Upgrade libjson0 (Ubuntu Pro) | May 15, 2020 | May 9, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 9, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub