DSA-4741: -1 json-c -- security update
Published Aug 5, 2020
·Updated
json-c - security update
Other sources
Tobias Stoeckmann discovered an integer overflow in the json-c JSON library, which could result in denial of service or potentially the execution of arbitrary code if large malformed JSON files are processed.
Affected Software
2 affected components
debian/json-c
debian/json-c
Event History
Aug 5, 2020
Advisory Published
12:00 AM
Frequently Asked Questions
1
Who is exposed to this issue?
Systems using the Debian json-c package are exposed when they process large, malformed JSON files. The available information does not identify specific applications or configurations beyond use of the affected library.
2
What does an attacker need to exploit it?
An attacker would need to cause a vulnerable consumer of json-c to process a large malformed JSON file. The reported impact includes denial of service and potentially arbitrary code execution.