Summary
It was discovered that jq did not perform sufficient bounds checking,
resulting in unbounded resource consumption. An attacker could use this
vulnerability to cause a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | jq | 1.3-1.1ubuntu1.1+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | jq | 1.5+dfsg-1ubuntu0.1+esm2 |
Vulnerabilities 1
-
Unscored —
The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and applica…
References
-
report
https://ubuntu.com/security/CVE-2016-4074