Skip to content
OpenAdvisories
Medium ELSA-2014-0703 2 CVEs

Moderate: json-c security update (Oracle Linux 7)

Published Jul 23, 2014 · Updated Jul 23, 2014

Ecosystem: Oracle Linux

Summary

[0.11-4]
- fix has collision CVE-2013-6371
- fix buffer overflow CVE-2013-6370
- enable upstream test suite

Fixed packages 3

ReleasePackageFixed in
Oracle Linux · 7 json-c 0:0.11-4.el7_0
Oracle Linux · 7 json-c-devel 0:0.11-4.el7_0
Oracle Linux · 7 json-c-doc 0:0.11-4.el7_0

Vulnerabilities 2

  • Unscored —
    CVE-2013-6370

    Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via uns…

    json-c json-c Debian Ubuntu
  • Unscored —
    CVE-2013-6371

    The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consu…

    json-c json-c Debian Ubuntu