CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-32292

CVSS 9.8v3.1pub. 2023-08-22upd. 2025-06-25

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Json C

    APP
    Json-C
    0.15-20200726

  • Netapp Active Iq Unified Manager

    APP
    Netapp
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-44228CRITICAL10.0⚠ KEVPL ✓same product

Apache Log4j2 Log4Shell — RCE przez podatną funkcję JNDI lookup

CVE-2024-52533CRITICAL9.8PL ✓same product

Buffer overflow w GNOME GLib — błąd off-by-one w obsłudze SOCKS4

CVE-2024-47561CRITICAL9.2PL ✓same product

Apache Avro Java SDK — RCE przez niebezpieczną deserializację schematu

CVE-2023-38545CRITICAL9.8PL ✓same product

Heap buffer overflow w libcurl podczas handshake z proxy SOCKS5

CVE-2023-23914CRITICAL9.1PL ✓same product

curl: pominięcie ochrony HSTS przy seryjnym pobieraniu wielu URL-i