Summary
It was discovered that Cpanel-JSON-XS incorrectly decoded certain data. A
remote attacker could use this issue to cause Cpanel-JSON-XS to crash,
resulting in a denial of service, or possibly obtain sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libcpanel-json-xs-perl | 4.19-1ubuntu0.1 |
| Ubuntu · 22.04 LTS 22.04:LTS | libcpanel-json-xs-perl | 4.27-1ubuntu0.1 |
Vulnerabilities 1
-
Critical 9.1
The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obt…
References
-
report
https://ubuntu.com/security/CVE-2022-48623