USN-4360-1: json-c vulnerability
It was discovered that json-c incorrectly handled certain JSON files. An attacker could possibly use this issue to execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libjson-c4to a version that resolves this vulnerability.Fixed in 0.13.1+dfsg-7ubuntu0.1 - Upgrade
Upgrade
ubuntu/libjson-c4to a version that resolves this vulnerability.Fixed in 0.13.1+dfsg-4ubuntu0.1 - Upgrade
Upgrade
ubuntu/libjson-c3to a version that resolves this vulnerability.Fixed in 0.12.1-1.3ubuntu0.1 - Upgrade
Upgrade
ubuntu/libjson-c2to a version that resolves this vulnerability.Fixed in 0.11-4ubuntu2.1 - Upgrade
Upgrade
ubuntu/libjson0to a version that resolves this vulnerability.Fixed in 0.11-4ubuntu2.1 - Upgrade
Upgrade
ubuntu/libjson-c2to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libjson0to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/libjson0to a version that resolves this vulnerability.Fixed in 0.9-1ubuntu1.2
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is USN-4360-1.
What is the severity of USN-4360-1?
The severity of USN-4360-1 is not specified.
How does the json-c vulnerability affect Ubuntu 20.04?
The vulnerability affects libjson-c4 version 0.13.1+dfsg-7ubuntu0.1 on Ubuntu 20.04.
Is there a fix for this vulnerability?
Yes, there is a fix for this vulnerability. Update libjson-c4 to version 0.13.1+dfsg-7ubuntu0.1.
Where can I find more information about USN-4360-1?
You can find more information about USN-4360-1 at the following references: [CVE-2020-12762](https://ubuntu.com/security/CVE-2020-12762), [USN-4360-4](https://ubuntu.com/security/notices/USN-4360-4), [Launchpad](https://launchpad.net/ubuntu/+source/json-c/0.13.1+dfsg-7ubuntu0.1).