Summary
It was discovered that RapidJSON did not properly protect against integer
overflows in certain instances when parsing JSON text. A remote attacker
could possibly use this issue to craft a malicious JSON file, that when
read by RapidJSON, would lead to an elevation of privilege, resulting in
the potential disclosure of sensitive information.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | rapidjson | 0.12~git20141031-3ubuntu0.1~esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | rapidjson | 1.1.0+dfsg2-3ubuntu0.1~esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | rapidjson | 1.1.0+dfsg2-5ubuntu1+esm2 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | rapidjson | 1.1.0+dfsg2-7ubuntu0.1~esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | rapidjson | 1.1.0+dfsg2-7.2ubuntu0.1~esm2 |
References
-
report
https://ubuntu.com/security/CVE-2024-39684