Skip to content
OpenAdvisories
Medium ALAS2-2025-3005 1 CVE

Moderate: perl-JSON-XS security update (Amazon Linux 2)

Published Sep 15, 2025 · Updated Sep 29, 2025

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-40928: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 perl-JSON-XS 1:3.01-2.amzn2.0.1
Amazon Linux · 2 perl-JSON-XS-debuginfo 1:3.01-2.amzn2.0.1

Vulnerabilities 1

  • High 7.5
    CVE-2025-40928

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact

    MLEHMANN JSON::XS perl-JSON-XS libjson-xs-perl Debian Ubuntu Azure Linux

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-40928.html