Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | ujson | 1.35-1+deb9u1 |
Vulnerabilities 1
-
Medium 5.5
UltraJSON vulnerable to Out-of-bounds Write
UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation.