Summary
It was discovered that Cpanel-JSON-XS incorrectly handled parsing certain
JSON data. An attacker could possibly use this issue to cause
Cpanel-JSON-XS to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libcpanel-json-xs-perl | 4.27-1ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | libcpanel-json-xs-perl | 4.37-1ubuntu0.1 |
Vulnerabilities 1
-
Medium 5.6
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact
References
-
report
https://ubuntu.com/security/CVE-2025-40929